SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-64042

HIGH · CVSS 8.8 EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel allows unauthorized access to unreserved BAR resources through the DMABUF export mechanism, potentially leading to privilege escalation or data leakage. This issue affects systems utilizing the vfio/pci driver and should be prioritized by organizations running Linux environments, particularly those leveraging virtualized graphics or direct memory access functionalities. Immediate patching is recommended to mitigate the risk of exploitation.

CVE
CVE-2026-64042
Severity
HIGH
CVSS
8.8
EPSS
0.15%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Check BAR resources before exporting a DMABUF A DMABUF exports access to BAR resources and, although they are requested at startup time, we need to ensure they really were reserved before exporting. Otherwise, it's possible to access unreserved resources through the export. Add a check to the DMABUF-creation path.