CVE-2026-64186

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds memory access issue exists in the AMD IOMMU debugfs implementation. In the functions iommu mmio write() and iommu capability write(), the variables dbg mmio offset and dbg cap offset are declared as integers but are populated using kstrtou32 from user(). If a user provides a sufficiently large value, it can be interpreted as a negative integer, potentially leading to out-of-bounds access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.