CVE-2026-64305

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the crypto: qat component, the service table list is not consistently protected by service lock during iterations. While the lock is used when entries are added or removed via adf service add() and adf service remove(), several other functions iterate over the list without it. A concurrent call to adf service register() or adf service unregister() could modify the list during traversal, potentially resulting in list corruption or a use-after-free (a condition where a program continues to use a pointer after it has been freed). The affected functions include adf dev init(), adf dev start(), adf dev stop(), adf dev shutdown(), adf dev restarting notify(), adf dev restarted notify(), and adf error notifier().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.