High severity7.8NVD Advisory· Published Jul 19, 2026· Updated Sep 2, 2026
CVE-2026-64051
CVE-2026-64051
Description
In the Linux kernel, the following vulnerability has been resolved:
accel/qaic: Add overflow check to remap_pfn_range during mmap
The call to remap_pfn_range in qaic_gem_object_mmap is susceptible to (re)mapping beyond the VMA if the BO is too large. This can cause use after free issues when munmap() unmaps only the VMA region and not the additional mappings. To prevent this, check the remaining size of the VMA before remapping and truncate the remapped length if sg->length is too large.
[jhugo: fix braces from checkpatch --strict]
Affected products
90- osv-coords89 versionspkg:linux/kernelpkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-corepkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-debug-uki-virtpkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-modules-corepkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-modules-extra-matchedpkg:rpm/almalinux/kernel-rtpkg:rpm/almalinux/kernel-rt-64kpkg:rpm/almalinux/kernel-rt-64k-corepkg:rpm/almalinux/kernel-rt-64k-debugpkg:rpm/almalinux/kernel-rt-64k-debug-corepkg:rpm/almalinux/kernel-rt-64k-debug-develpkg:rpm/almalinux/kernel-rt-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-modules-corepkg:rpm/almalinux/kernel-rt-64k-debug-modules-extrapkg:rpm/almalinux/kernel-rt-64k-develpkg:rpm/almalinux/kernel-rt-64k-modulespkg:rpm/almalinux/kernel-rt-64k-modules-corepkg:rpm/almalinux/kernel-rt-64k-modules-extrapkg:rpm/almalinux/kernel-rt-corepkg:rpm/almalinux/kernel-rt-debugpkg:rpm/almalinux/kernel-rt-debug-corepkg:rpm/almalinux/kernel-rt-debug-develpkg:rpm/almalinux/kernel-rt-debug-modulespkg:rpm/almalinux/kernel-rt-debug-modules-corepkg:rpm/almalinux/kernel-rt-debug-modules-extrapkg:rpm/almalinux/kernel-rt-develpkg:rpm/almalinux/kernel-rt-modulespkg:rpm/almalinux/kernel-rt-modules-corepkg:rpm/almalinux/kernel-rt-modules-extrapkg:rpm/almalinux/kernel-toolspkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-uki-virtpkg:rpm/almalinux/kernel-uki-virt-addonspkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-zfcpdump-modules-corepkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/libperfpkg:rpm/almalinux/perfpkg:rpm/almalinux/python3-perfpkg:rpm/almalinux/rtlapkg:rpm/almalinux/rvpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2016.0
>= 6.4.0, < 6.6.142+ 88 more
- (no CPE)range: >= 6.4.0, < 6.6.142
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1.160000.2.22
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
Patches
Vulnerability mechanics
References
5- git.kernel.org/stable/c/8c795012d0e06b7740e40319b86ff8d2a435098dnvdPatch
- git.kernel.org/stable/c/8dd6edbe26770df147136c3f2ac976c873b82650nvdPatch
- git.kernel.org/stable/c/97a8e89cdef36207a8776edc03d6931763a06ad0nvdPatch
- git.kernel.org/stable/c/9baafc2fea096279e75480f93fd5942e8336b510nvdPatch
- git.kernel.org/stable/c/aa16b2bc0f02709919e2435f531406531e5bcc69nvdPatch
News mentions
0No linked articles in our index yet.