Out-of-bounds read in Linux kernel - CVE-2026-64490

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to out-of-bounds access in virtio-snd control handling in sound/virtio/virtio_kctl.c when processing device-provided control metadata. A local user can provide a malicious or buggy virtio sound device that advertises an invalid control type or an oversized value count to cause a denial of service.

Exploitation requires the presence of a virtio sound device that supplies crafted control metadata to the guest kernel.

Affected software

How to mitigate CVE-2026-64490

External References

• https://git.kernel.org/stable/c/21584672fd699abe1768241d6c501b2de6139b6a
• https://git.kernel.org/stable/c/3243563f99ef5d3949b934bd6390a5679405d0e1
• https://git.kernel.org/stable/c/5da9742de22db0dbaa8d414214ab5e1bedde00f9
• https://git.kernel.org/stable/c/c77a6cbb36ff8cbc1f084d94f8dcda5250935271

Related Security Bulletins

• Out-of-bounds read in Linux kernel virtio
• Red Hat Enterprise Linux 10 update for kernel
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux
• Ubuntu update for linux-gcp-7.0