CVE-2026-64251

A flaw was found in the Linux kernel's power sequencing (pwrseq) core. A local attacker with access to the debugfs interface could exploit a use-after-free vulnerability in the pwrseq_debugfs_seq_next() function. This flaw allows the kernel to access memory after it has been freed, which can lead to a system crash and denial of service. In some scenarios, this could also potentially result in information disclosure or integrity impact.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and is constrained to the kernel debugfs interface. In standard Red Hat configurations, access to debugfs is restricted to privileged administrative accounts, preventing unprivileged users from interacting with the power sequencing debug entries. Furthermore, this flaw is not present in older enterprise distributions such as Red Hat Enterprise Linux 8 and 9, as they do not include the vulnerable code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.