CVE-2026-64304

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the qat rsa setkey crt() function where DMA buffers are allocated at half the key size (key sz / 2). The function right-aligns CRT components (p, q, dp, dq, qinv) using memcpy(dst + half key sz - len, src, len). If a CRT component length len exceeds half key sz, an integer underflow occurs during subtraction, leading to a memcpy operation that writes past the DMA buffer and causes memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.