CVE-2026-64283

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM guest memfd implementation where the sum of the memslot binding offset and size is treated as a signed value (loff t) instead of an unsigned value (uoff t) on 64-bit kernels. This can lead to an integer overflow where a massive offset plus the size results in a negative 64-bit value. When this negative sum is compared against the file size, it incorrectly passes the overflow check, allowing an invalid offset to be used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.