CVE-2026-64162
In the Linux kernel, a spinlock used by the idpf driver was not initialized before it could be used, causing lockdep warnings and potential kernel instability. The issue has been fixed by moving the spinlock initialization earlier in the driver code.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel systems that use the idpf driver for Intel network devices. System administrators and users running affected kernel versions are impacted.
Real-world impact
An attacker could trigger kernel lockdep warnings that may lead to crashes or a denial‑of‑service, causing the system to become unresponsive or require a reboot.
Why this severity
The CVSS score of 9.8 reflects that the flaw can be exploited without any user interaction or special privileges, yet it can completely disrupt system availability, which is why it is rated critical.
What to do about it
- 01Upgrade the Linux kernel to a version that includes the idpf_ptp_init spinlock initialization fix.
- 02Reboot the system to ensure the updated kernel is running.
NVD description indicates the kernel patch has been applied.
Timeline
- Jul 19, 2026 · 14d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 20, 2026 · 13d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
- Jul 30, 2026 · 3d agoAdvisory updatedThe NVD record was last revised.