Exposure of Resource to Wrong Sphere in Linux kernel - CVE-2026-64529

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU139407

Exposure of Resource to Wrong Sphere in Linux kernel - CVE-2026-64529

Published: July 27, 2026


Vulnerability identifier: #VU139407
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-64529
CWE-ID: CWE-668
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to affect device configuration and control operations.

The vulnerability exists due to an exposed attack surface in the qat_adf_ctl character device and its ioctl interface when handling ioctl requests for device configuration, start, stop, status query, and enumeration. A local user can send crafted ioctl requests to affect device configuration and control operations.

The ioctl interface was not part of any public uAPI header.


Affected software

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-kvm (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure (Ubuntu package)
linux-raspi (Ubuntu package)
linux-oracle (Ubuntu package)
linux-lowlatency (Ubuntu package)
linux-gke (Ubuntu package)
linux-aws-5.15 (Ubuntu package)
linux-lowlatency-hwe-5.15 (Ubuntu package)
linux-hwe-5.15 (Ubuntu package)
linux-fips (Ubuntu package)
linux-azure-5.15 (Ubuntu package)
linux-azure-fde-5.15 (Ubuntu package)
linux-nvidia-tegra (Ubuntu package)
linux-nvidia-tegra-igx (Ubuntu package)
linux-intel-iotg (Ubuntu package)
linux-ibm-5.15 (Ubuntu package)
linux-gkeop (Ubuntu package)
linux-realtime (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-ibm (Ubuntu package)
linux-intel-iotg-5.15 (Ubuntu package)
linux-oracle-5.15 (Ubuntu package)
linux-gcp-5.15 (Ubuntu package)
linux-nvidia-tegra-5.15 (Ubuntu package)
linux-xilinx-zynqmp (Ubuntu package)
linux-intel-iot-realtime (Ubuntu package)
linux-gcp-fips (Ubuntu package)
linux-aws-fips (Ubuntu package)
linux-azure-fips (Ubuntu package)
linux-nvidia-bos (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-gcp-7.0 (Ubuntu package)
linux-oracle-7.0 (Ubuntu package)
linux-azure-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)
linux-aws-7.0 (Ubuntu package)
linux-nvidia-7.0 (Ubuntu package)

How to mitigate CVE-2026-64529

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - addressed in versions 5.15.0-198.208, 7.0.0-31.31
linux-kvm (Ubuntu package) - update to 5.15.0-1109.114
linux-aws (Ubuntu package) - addressed in versions 5.15.0-1117.124, 7.0.0-1012.12
linux-gcp (Ubuntu package) - addressed in versions 5.15.0-1118.128, 7.0.0-1011.11
linux-azure (Ubuntu package) - addressed in versions 5.15.0-1123.132, 7.0.0-1014.14
linux-raspi (Ubuntu package) - addressed in versions 5.15.0-1113.116, 7.0.0-1019.19
linux-oracle (Ubuntu package) - addressed in versions 5.15.0-1114.120, 7.0.0-1011.11
linux-lowlatency (Ubuntu package) - update to 5.15.0-195.205
linux-gke (Ubuntu package) - addressed in versions 5.15.0-1113.119, 7.0.0-1006.7
linux-aws-5.15 (Ubuntu package) - update to 5.15.0-1117.124~20.04.1
linux-lowlatency-hwe-5.15 (Ubuntu package) - update to 5.15.0-195.205~20.04.1
linux-hwe-5.15 (Ubuntu package) - update to 5.15.0-198.208~20.04.1
linux-fips (Ubuntu package) - update to 5.15.0-198.208+fips1
linux-azure-5.15 (Ubuntu package) - update to 5.15.0-1123.132~20.04.1
linux-azure-fde-5.15 (Ubuntu package) - update to 5.15.0-1122.131~20.04.1
linux-nvidia-tegra (Ubuntu package) - addressed in versions 5.15.0-1070.72, 6.8.0-1035.38
linux-nvidia-tegra-igx (Ubuntu package) - update to 5.15.0-1059.59
linux-intel-iotg (Ubuntu package) - update to 5.15.0-1112.118
linux-ibm-5.15 (Ubuntu package) - update to 5.15.0-1111.115~20.04.1
linux-gkeop (Ubuntu package) - update to 5.15.0-1100.108
linux-realtime (Ubuntu package) - addressed in versions 5.15.0-1116.125, 7.0.0-31.31.1
linux-nvidia (Ubuntu package) - addressed in versions 5.15.0-1112.113, 7.0.0-1018.18
linux-ibm (Ubuntu package) - addressed in versions 5.15.0-1111.115, 7.0.0-1013.13
linux-intel-iotg-5.15 (Ubuntu package) - update to 5.15.0-1112.118~20.04.1
linux-oracle-5.15 (Ubuntu package) - update to 5.15.0-1114.120~20.04.1
linux-gcp-5.15 (Ubuntu package) - update to 5.15.0-1118.128~20.04.1
linux-nvidia-tegra-5.15 (Ubuntu package) - update to 5.15.0-1070.72~20.04.1
linux-xilinx-zynqmp (Ubuntu package) - update to 5.15.0-1080.84
linux-intel-iot-realtime (Ubuntu package) - update to 5.15.0-1109.111
linux-gcp-fips (Ubuntu package) - update to 5.15.0-1118.128+fips1
linux-aws-fips (Ubuntu package) - update to 5.15.0-1117.124+fips1
linux-azure-fips (Ubuntu package) - update to 5.15.0-1123.132+fips1
linux-nvidia-bos (Ubuntu package) - update to 7.0.0-2018.18
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-31.31~24.04.1
linux-gcp-7.0 (Ubuntu package) - update to 7.0.0-1011.11~24.04.1
linux-oracle-7.0 (Ubuntu package) - update to 7.0.0-1011.11~24.04.1
linux-azure-7.0 (Ubuntu package) - update to 7.0.0-1014.14~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1013.13
linux-aws-7.0 (Ubuntu package) - update to 7.0.0-1012.12~24.04.1
linux-nvidia-7.0 (Ubuntu package) - update to 7.0.0-1018.18~24.04.1

External References

Related Security Bulletins