CVE-2026-64457

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue in the virtio pci component can lead to a NULL pointer dereference when unbinding a virtio balloon device. This occurs due to an indexing mismatch in how virtual queue (vq) info pointers are stored and looked up. Specifically, the functions vp find vqs msix() and vp find vqs intx() store info pointers using a sparse array index i, while the virtqueue uses a dense index queue idx that skips NULL entries. When certain conditional features are absent, these indices diverge, causing the vp del vqs() function to access a NULL entry in the vp dev->vqs array.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.