PT-2026-61503 · Linux · Linux Kernel

CVE-2026-64186 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds memory access issue exists in the AMD IOMMU debugfs implementation. In the iommu mmio write() and iommu capability write() functions, the variables dbg mmio offset and dbg cap offset are declared as integers and populated using kstrtou32 from user(). If a user provides a sufficiently large value, it can be interpreted as a negative integer, potentially leading to unauthorized memory access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-64186

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-64186 · Security Note
• https://twitter.com/CVEnew/status/2078951941002973328 · Twitter Post
• https://git.kernel.org/stable/c/62f9dfbf1aceae88b03c5ca08f7d36e943939dec · Note
• https://git.kernel.org/stable/c/488d2c76bd9f78433a70690d1054bfae3d39a407 · Note
• https://twitter.com/infoflowcloud/status/2078953188842000819 · Twitter Post
• https://git.kernel.org/stable/c/8dfd3d8d74435344ee8dc9237596959c8b2a6cbe · Note