PT-2026-64760 · Linux · Linux
CVE-2026-64529
·
Published
2026-07-25
·
Updated
2026-07-25
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
crypto: qat - remove unused character device and IOCTLs
The QAT driver exposes a character device (qat adf ctl) with IOCTLs
for device configuration, start, stop, status query and enumeration.
These IOCTLs are not part of any public uAPI header and have no known
in-tree or out-of-tree users. Device lifecycle is already managed via
sysfs.
The ioctl interface also increases the attack surface and is the
subject of a number of bug reports.
Remove the character device, the IOCTL definitions, and the related
data structures (adf dev status info, adf user cfg key val,
adf user cfg section, adf user cfg ctl data). Drop the now-unused
adf cfg user.h header and strip adf ctl drv.c down to the minimal
module init/module exit hooks for workqueue, AER, and crypto/compression
algorithm registration.
Clean up leftover dead code that was only reachable from the removed
IOCTL paths: adf cfg del all(), adf devmgr verify id(),
adf devmgr get num dev(), adf devmgr get dev by id(),
adf get vf real id() and the unused ADF CFG macros.
Additionally, drop the entry associated to QAT IOCTLs in
ioctl-number.rst.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux