CVE-2026-64118
Received Received - Intake

Double Free in Linux Kernel qed Driver

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qed_cxt_tables_alloc() If one of the later PF or VF CID bitmap allocations fails, qed_cid_map_alloc() jumps to cid_map_fail and frees the previously allocated CID bitmaps before returning an error. qed_cxt_tables_alloc() then calls qed_cxt_mngr_free(), which invokes qed_cid_map_free() again. Fix this by setting each CID bitmap pointer to NULL after bitmap_free() to avoid double free. The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1-rc3. Runtime reproduction was not attempted because exercising the failing allocation path requires device-specific setup.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-64118
EUVD
EUVD-2026-45803

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
linux linux_kernel 6.13-rc1
linux linux_kernel 7.1-rc3
linux linux_kernel From 7.1-rc3 (exc)
linux linux_kernel to 6.13-rc1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a double-free vulnerability in the Linux kernel's qed driver. When allocating CID bitmaps for PF or VF devices, if a later allocation fails, the code attempts to free previously allocated bitmaps but then the main function tries to free them again, leading to a double-free condition.

Detection Guidance

This vulnerability is specific to the Linux kernel's qed driver and involves a double free issue in CID bitmap allocation. Detection requires kernel source code analysis or specialized tools that can identify memory management bugs in kernel modules. No direct commands are provided in the context for detection.

Impact Analysis

A double-free vulnerability can cause kernel memory corruption, leading to system crashes, undefined behavior, or potential privilege escalation. It may allow attackers to execute arbitrary code or cause denial-of-service conditions on affected systems.

Compliance Impact

This vulnerability is a memory management issue in the Linux kernel that could lead to a double free error. It does not directly affect compliance with standards like GDPR or HIPAA, as those focus on data protection and privacy rather than kernel memory safety. However, if exploited, it could potentially cause system instability or crashes, indirectly impacting systems handling sensitive data.

Mitigation Strategies

Apply the official kernel patch that fixes the double free issue in qed_cxt_tables_alloc(). Update to a kernel version that includes the fix or manually apply the patch from the Linux kernel source. Monitor vendor advisories for backported fixes if using a stable kernel branch.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64118. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart