CVE-2026-64363 | Linux Kernel up to 7.2-rc2 appleir appleir_remove input_dev/current_key use after free

July 25, 2026 Yanac

A vulnerability described as critical has been identified in Linux Kernel up to 7.2-rc2. This impacts the function appleir_remove of the component appleir. Such manipulation of the argument input_dev/current_key leads to use after free.

This vulnerability is referenced as CVE-2026-64363. The attack can only be performed from a local environment. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More