CVE-2026-64219

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A stack buffer overflow occurs in the dc process dmub aux transfer async() function when payload->length bytes are copied into a 16-byte stack buffer (dpaux.data[16]). Because the check is performed by an ASSERT() that is inactive in release builds, providing a length greater than 16 leads to a buffer overflow via memcpy(). Additionally, the function uses link index to dereference dc->links[] without verifying it against dc->link count, which can result in an out-of-bounds access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.