CVE-2026-64402

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write exists in the smb sync perf buffer() function within the coresight ultrasoc-smb component. When the SMB sink operates as a perf AUX sink, the smb update buffer() function calls smb sync perf buffer() to copy hardware trace data into perf AUX ring buffer pages. The system derives the page index pg idx from the head variable (specifically handle->head). Because the normalization of pg idx relative to the number of pages is only applied after the first loop iteration, the initial page index may exceed the buffer size, leading to a write operation beyond the boundaries of the dst pages[] array.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.