CVE-2026-64051
Received Received - Intake

Buffer Overflow in Linux Kernel QAIC Driver

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Add overflow check to remap_pfn_range during mmap The call to remap_pfn_range in qaic_gem_object_mmap is susceptible to (re)mapping beyond the VMA if the BO is too large. This can cause use after free issues when munmap() unmaps only the VMA region and not the additional mappings. To prevent this, check the remaining size of the VMA before remapping and truncate the remapped length if sg->length is too large. [jhugo: fix braces from checkpatch --strict]

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-64051
EUVD
EUVD-2026-45624

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a flaw in the accel/qaic driver where remap_pfn_range during mmap operations can map memory beyond the intended Virtual Memory Area (VMA). If the buffer object (BO) is too large, it may lead to use-after-free issues when munmap() only unmaps the VMA region, leaving additional mappings active.

Detection Guidance

This vulnerability is specific to the Linux kernel's accel/qaic driver and requires kernel-level inspection. Detection involves checking kernel logs for memory management errors or use-after-free events related to the qaic driver. Commands like dmesg | grep qaic or journalctl -k | grep qaic may help identify issues. Ensure your kernel is updated to a patched version.

Impact Analysis

This vulnerability could allow an attacker to manipulate memory mappings, potentially causing system instability, crashes, or unauthorized access to sensitive data. It may also enable privilege escalation if exploited successfully.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it pertains to memory management in the Linux kernel. However, if exploited, it could lead to unauthorized memory access, which may indirectly impact data confidentiality and integrity, key aspects of these regulations.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for CVE-2026-64051. If immediate patching is not possible, disable the qaic driver module (rmmod qaic) as a temporary workaround. Monitor kernel logs for any signs of exploitation or instability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64051. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart