CVE-2026-64018

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mana hwc rx event handler() function where the rx req idx variable, derived from sge->address in DMA-coherent memory, is used to index the reqs[] array without a bounds check. In Confidential VMs using SEV-SNP or TDX, this shared unencrypted memory can be modified by hardware at any time, potentially leading to an out-of-bounds array access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.