CVE-2026-64051
In the Linux kernel, the following vulnerability has been resolved:
accel/qaic: Add overflow check to remap_pfn_range during mmap
The call to remap_pfn_range in qaic_gem_object_mmap is susceptible to
(re)mapping beyond the VMA if the BO is too large. This can cause use
after free issues when munmap() unmaps only the VMA region and not the
additional mappings. To prevent this, check the remaining size of the
VMA before remapping and truncate the remapped length if sg->length is
too large.
[jhugo: fix braces from checkpatch --strict]
CSIRTS triage
- What
- Multiple kernel vulnerabilities across architectures and driver subsystems including AMD processor microarchitectural flaws and cache isolation issues.
- Who is affected
- NVIDIA BaseOS systems running affected Linux kernel versions.
- Urgency
- Moderate; privilege escalation and DoS vectors present, primarily requiring local access.
- Action
- Apply USN-8664-1 kernel security update for NVIDIA BaseOS.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-64051
Get an email if CVE-2026-64051 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.
Advisory coverage (8)
- unknownUSN-8729-1: Linux kernel vulnerabilitiesubuntu · 2026-09-07
- unknownexploitedUSN-8728-1: Linux kernel (GCP) vulnerabilitiesubuntu · 2026-09-07
- unknownUSN-8664-1: Linux kernel (NVIDIA BaseOS) vulnerabilitiesubuntu · 2026-08-20
- unknownUSN-8663-1: Linux kernel (NVIDIA) vulnerabilitiesubuntu · 2026-08-20
- highUSN-8618-1: Linux kernel vulnerabilitiesubuntu · 2026-07-28
- highUSN-8603-1: Linux kernel (Azure) vulnerabilitiesubuntu · 2026-07-24
- highUSN-8593-1: Linux kernel vulnerabilitiesubuntu · 2026-07-23
- highCVE-2026-64051: In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Add overflow c…nvd · 2026-07-19
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-64051)