CVE-2026-64051
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
accel/qaic: Add overflow check to remap_pfn_range during mmap
In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Add overflow check to remap_pfn_range during mmap The call to remap_pfn_range in qaic_gem_object_mmap is susceptible to (re)mapping beyond the VMA if the BO is too large. This can cause use after free issues when munmap() unmaps only the VMA region and not the additional mappings. To prevent this, check the remaining size of the VMA before remapping and truncate the remapped length if sg->length is too large. [jhugo: fix braces from checkpatch --strict]
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| ff13be8303336ead5621712f2c55012d738878b5 | affected | git | 9baafc2fea096279e75480f93fd5942e8336b510 | Unavailable | None listed |
| ff13be8303336ead5621712f2c55012d738878b5 | affected | git | 8dd6edbe26770df147136c3f2ac976c873b82650 | Unavailable | None listed |
| ff13be8303336ead5621712f2c55012d738878b5 | affected | git | 97a8e89cdef36207a8776edc03d6931763a06ad0 | Unavailable | None listed |
| ff13be8303336ead5621712f2c55012d738878b5 | affected | git | 8c795012d0e06b7740e40319b86ff8d2a435098d | Unavailable | None listed |
| ff13be8303336ead5621712f2c55012d738878b5 | affected | git | aa16b2bc0f02709919e2435f531406531e5bcc69 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.4 | Unavailable | None listed |
| 6.6.142 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.92 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.34 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.0.11 | unaffected | semver | Unavailable | 7.0.* | None listed |
| 7.1 | unaffected | original_commit_for_fix | Unavailable | * | None listed |