Answer in brief
CVE-2026-64013 records a Unknown severity vulnerability in ACPI: button: Fix ACPI GPE handler leak during removal. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=a7e23ec17feecc7bac0d500cea900cace7b50129 <c85f325d9ec3116b0d4ee9d5b76c26aea0ad5ce0 || >=a7e23ec17feecc7bac0d500cea900cace7b50129 <614cb8c26c5aa53196ee9b211b76ee618b147d32 || >=a7e23ec17feecc7bac0d500cea900cace7b50129 <fe80251152fed5b185f795ef2cd9f7fe9c3162e0 | c85f325d9ec3116b0d4ee9d5b76c26aea0ad5ce0, 614cb8c26c5aa53196ee9b211b76ee618b147d32, fe80251152fed5b185f795ef2cd9f7fe9c3162e0 |
| Linux/Linuxgeneric | 6.15 | Not reported |
Published upstream
Jul 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 15, 2026
In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee ("ACPI: button: Install notifier for system events as well") changed the ACPI notify handler type for ACPI buttons to ACPI_ALL_NOTIFY, but it forgot to update acpi_button_remove() to reflect that change. This leads to leaking the notify handler past driver removal, which may cause a kernel crash to occur if ACPI notify on the given device is triggered after removing the driver, and causes a subsequent probe of the given device with the same driver to fail. Address this by updating the acpi_remove_notify_handler() call in acpi_button_remove() as appropriate.
Quoted source text, attributed separately from HOL analysis.