CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-64438: linux kernel from 4.3 (inclusive), before 5.10.261 (exclusive), from 5.11 (inclusive), before 5.15.212 (exclusive)…

CVE-2026-64438. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00135 (percentile 0.02612), scored 15-Oct-2026.

Affected technology

linux kernel · from 4.3 (inclusive), before 5.10.261 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.212 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.178 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.145 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.97 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.40 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.1.4 (exclusive)
linux

Linux · ed8ccaef52fa03fb03cff45b380f72c9f869f273 to before 218c2836b3987f3fa1d9eac505462cded0821e4c, ed8ccaef52fa03fb03cff45b380f72c9f869f273 to before 446b4d77599cf1a168573f7fb32a4a6aa4f09219, ed8ccaef52fa03fb03cff45b380f72c9f869f273 to before 5d916c1eae1933511a69bffe243b4ee5d7da399c, ed8ccaef52fa03fb03cff45b380f72c9f869f273 to before f344a369d0380d54c8d6c8d24734a78dd5a89817, ed8ccaef52fa03fb03cff45b380f72c9f869f273 to before 51144032248cc4ea22917370565650670b8b4e9b, ed8ccaef52fa03fb03cff45b380f72c9f869f273 to before 49cd5ac6de8de39a14ead609bb552d372d5602cd, ed8ccaef52fa03fb03cff45b380f72c9f869f273 to before 6e92b28cd74fa433658efeadf21b9d4b01023d7d, ed8ccaef52fa03fb03cff45b380f72c9f869f273 to before 277281c10c63791067d24d421f7c43a15faa9096
Linux

Linux · 4.3
Linux

Component: Not specified by the source
File: drivers/crypto/intel/qat/qat_common/adf_accel_devices.h, drivers/crypto/intel/qat/qat_common/adf_common_drv.h, drivers/crypto/intel/qat/qat_common/adf_isr.c, drivers/crypto/intel/qat/qat_common/adf_sriov.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
35.2 /100 (P4)
CVSS 3.1
8.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · Source advisory
EPSS
0.00135 · percentile 0.02612 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-64438.html