PT-2026-64760 · Linux · Linux
CVE-2026-64529
·
Publicado
2026-07-25
·
Atualizado
2026-07-25
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
crypto: qat - remove unused character device and IOCTLs
The QAT driver exposes a character device (qat adf ctl) with IOCTLs
for device configuration, start, stop, status query and enumeration.
These IOCTLs are not part of any public uAPI header and have no known
in-tree or out-of-tree users. Device lifecycle is already managed via
sysfs.
The ioctl interface also increases the attack surface and is the
subject of a number of bug reports.
Remove the character device, the IOCTL definitions, and the related
data structures (adf dev status info, adf user cfg key val,
adf user cfg section, adf user cfg ctl data). Drop the now-unused
adf cfg user.h header and strip adf ctl drv.c down to the minimal
module init/module exit hooks for workqueue, AER, and crypto/compression
algorithm registration.
Clean up leftover dead code that was only reachable from the removed
IOCTL paths: adf cfg del all(), adf devmgr verify id(),
adf devmgr get num dev(), adf devmgr get dev by id(),
adf get vf real id() and the unused ADF CFG macros.
Additionally, drop the entry associated to QAT IOCTLs in
ioctl-number.rst.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux