UBUNTU-CVE-2026-64529 (CVE-2026-64529)

Vulnerability from osv_ubuntu – Published: 2026-07-25 10:17 – Updated: 2026-10-30 18:48 – Source website
VLAI
Details

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device (qat_adf_ctl) with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public uAPI header and have no known in-tree or out-of-tree users. Device lifecycle is already managed via sysfs. The ioctl interface also increases the attack surface and is the subject of a number of bug reports. Remove the character device, the IOCTL definitions, and the related data structures (adf_dev_status_info, adf_user_cfg_key_val, adf_user_cfg_section, adf_user_cfg_ctl_data). Drop the now-unused adf_cfg_user.h header and strip adf_ctl_drv.c down to the minimal module_init/module_exit hooks for workqueue, AER, and crypto/compression algorithm registration. Clean up leftover dead code that was only reachable from the removed IOCTL paths: adf_cfg_del_all(), adf_devmgr_verify_id(), adf_devmgr_get_num_dev(), adf_devmgr_get_dev_by_id(), adf_get_vf_real_id() and the unused ADF_CFG macros. Additionally, drop the entry associated to QAT IOCTLs in ioctl-number.rst.

Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
N/A (UNKNOWN)
low
References
https://ubuntu.com/security/CVE-2026-64529 REPORT
https://www.cve.org/CVERecord?id=CVE-2026-64529 REPORT
https://git.kernel.org/linus/d237230728c567297f2f… REPORT
https://git.kernel.org/stable/c/071590a44cbc38483… REPORT
https://git.kernel.org/stable/c/1de076f43e64bf65f… REPORT
https://git.kernel.org/stable/c/3ae49dd04dbb11fb7… REPORT
https://git.kernel.org/stable/c/6848a6e39cac44fdb… REPORT
https://git.kernel.org/stable/c/a4999664a5ef77bdb… REPORT
https://git.kernel.org/stable/c/b1ea97076bd0a5196… REPORT
https://git.kernel.org/stable/c/b8ebf008696de1ec0… REPORT
https://git.kernel.org/stable/c/d237230728c567297… REPORT
https://git.kernel.org/stable/c/de2cc38489b629927… REPORT
https://ubuntu.com/security/notices/USN-8726-1 ADVISORY
https://ubuntu.com/security/notices/USN-8727-1 ADVISORY
https://ubuntu.com/security/notices/USN-8728-1 ADVISORY
https://ubuntu.com/security/notices/USN-8760-1 ADVISORY
https://ubuntu.com/security/notices/USN-8781-1 ADVISORY
https://ubuntu.com/security/notices/USN-8726-2 ADVISORY
https://ubuntu.com/security/notices/USN-8726-3 ADVISORY
https://ubuntu.com/security/notices/USN-8800-1 ADVISORY
https://ubuntu.com/security/notices/USN-8760-2 ADVISORY
https://ubuntu.com/security/notices/USN-8728-2 ADVISORY
https://ubuntu.com/security/notices/USN-8726-4 ADVISORY
https://ubuntu.com/security/notices/USN-8728-3 ADVISORY
https://ubuntu.com/security/notices/USN-8878-1 ADVISORY
https://ubuntu.com/security/notices/USN-8879-1 ADVISORY
https://ubuntu.com/security/notices/USN-8877-1 ADVISORY
https://ubuntu.com/security/notices/USN-8875-1 ADVISORY
https://ubuntu.com/security/notices/USN-8875-2 ADVISORY
To clipboard 

Loading 1.0 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.