Log in Start free

Vulnerability · Published Jul 19, 2026 · Assigned by Linux

CVE-2026-64051accel/qaic: Add overflow check to remap_pfn_range during mmap

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 97.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Add overflow check to remap_pfn_range during mmap The call to remap_pfn_range in qaic_gem_object_mmap is susceptible to (re)mapping beyond the VMA if the BO is too large. This can cause use after free issues when munmap() unmaps only the VMA region and not the additional mappings. To prevent this, check the remaining size of the VMA before remapping and truncate the remapped length if sg->length is too large. [jhugo: fix braces from checkpatch --strict]

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10kernel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug-devel-matched6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-devel-matched6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-abi-stablelists6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-cross-headers6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-devel-matched6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-uki-virt6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-devel-matched6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-doc6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-headers6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-modules-extra-matched6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-debug6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-debug-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-debug-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-debug-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-debug-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-debug-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-debug6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-debug-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-debug-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-debug-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-debug-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-debug-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-tools6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-tools-libs6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-tools-libs-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-uki-virt6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-uki-virt-addons6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump-devel-matched6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10libperf6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10perf6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10python3-perf6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10rtla6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10rv6.12.0-211.53.1.el10_2ALSA-2026:65334
Debian:13linux6.12.94-1DEBIAN-CVE-2026-64051
Debian:14linux7.0.12-1DEBIAN-CVE-2026-64051
Rocky Linux:10kernel0:6.12.0-211.53.1.el10_2RLSA-2026:65334
Ubuntu:24.04:LTSlinux6.8.0-139.139UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux6.8.0-139.139USN-8729-1
Ubuntu:26.04:LTSlinux7.0.0-28.28UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-aws6.8.0-1064.67UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-aws6.8.0-1064.67USN-8729-6
Ubuntu:26.04:LTSlinux-aws7.0.0-1009.9UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1064.67~22.04.1USN-8729-6
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1064.67~22.04.1UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-azure6.8.0-1067.75UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-azure6.8.0-1067.75USN-8761-1
Ubuntu:26.04:LTSlinux-azure7.0.0-1010.10UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1067.75~22.04.1USN-8761-3
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1067.75~22.04.1UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-azure-7.07.0.0-1014.14~24.04.1UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1065.72UBUNTU-CVE-2026-64051
Ubuntu:26.04:LTSlinux-azure-fde7.0.0-1009.9UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1065.72~22.04.1UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-azure-fde-7.07.0.0-1013.13~24.04.1UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-gcp6.8.0-1067.75UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-gcp6.8.0-1067.75USN-8729-1
Ubuntu:26.04:LTSlinux-gcp7.0.0-1008.8UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1067.75~22.04.1UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1067.75~22.04.1USN-8729-3
Ubuntu:24.04:LTSlinux-gcp-7.07.0.0-1011.11~24.04.1UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-gke6.8.0-1062.70USN-8729-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1062.70UBUNTU-CVE-2026-64051
Ubuntu:26.04:LTSlinux-gke7.0.0-1003.4UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1049.53UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1049.53USN-8729-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-28.28~24.04.1UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-ibm6.8.0-1064.65USN-8729-3
Ubuntu:24.04:LTSlinux-ibm6.8.0-1064.65UBUNTU-CVE-2026-64051
Ubuntu:26.04:LTSlinux-ibm7.0.0-1010.10UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1066.67~22.04.1UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-139.139.1USN-8729-4
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-139.139.1UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-139.139.1~22.04.1UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-139.139.1~22.04.1USN-8729-4
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1062.65USN-8729-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1062.65UBUNTU-CVE-2026-64051
Ubuntu:26.04:LTSlinux-nvidia7.0.0-1016.16UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1062.65~22.04.1UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1062.65~22.04.1USN-8729-1
Ubuntu:24.04:LTSlinux-nvidia-7.07.0.0-1016.16~24.04.1UBUNTU-CVE-2026-64051
Ubuntu:26.04:LTSlinux-nvidia-bos7.0.0-2016.16UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1062.65.1USN-8729-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1062.65.1UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1035.38UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-64051
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1009.9UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-oracle6.8.0-1061.64USN-8802-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1061.64UBUNTU-CVE-2026-64051
Ubuntu:26.04:LTSlinux-oracle7.0.0-1008.8UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1061.64~22.04.1UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1061.64~22.04.1USN-8802-1
Ubuntu:24.04:LTSlinux-oracle-7.07.0.0-1011.11~24.04.1UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-raspi6.8.0-1064.68UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-raspi6.8.0-1064.68USN-8729-1
Ubuntu:26.04:LTSlinux-raspi7.0.0-1015.15UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-64051
Ubuntu:26.04:LTSlinux-realtime7.0.0-28.28.1UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-64051
Ubuntu:26.04:LTSlinux-riscv7.0.0-28.28.1UBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-64051
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-139.139~22.04.1UBUNTU-CVE-2026-64051
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-28.28.1~24.04.3UBUNTU-CVE-2026-64051

Affected products (as reported)

VendorProductVersions
Linux Linux ff13be8303336ead5621712f2c55012d738878b5 – before 9baafc2fea096279e75480f93fd5942e8336b510ff13be8303336ead5621712f2c55012d738878b5 – before 8dd6edbe26770df147136c3f2ac976c873b82650ff13be8303336ead5621712f2c55012d738878b5 – before 97a8e89cdef36207a8776edc03d6931763a06ad0ff13be8303336ead5621712f2c55012d738878b5 – before 8c795012d0e06b7740e40319b86ff8d2a435098dff13be8303336ead5621712f2c55012d738878b5 – before aa16b2bc0f02709919e2435f531406531e5bcc69
Linux Linux 6.4

References