CVE-2026-64472

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vfio/mlx5 component where bitfield operations are not atomic, utilizing a read-modify-write pattern. This can lead to race conditions when bitfields that are concurrently updated are packed into the same storage unit. To resolve this, flags modified by user actions or those reaching across devices are moved to dedicated storage units, while flags modified only during open/close operations remain as bitfields. This change involves relocating mlx5 vhca page tracker.status to optimize the structure layout. The affected functions include mlx5vf cmd set migratable(), mlx5fv vf event(), mlx5vf start page tracker(), mlx5vf stop page tracker(), mlx5vf state mutex unlock(), and mlx5vf pci aer reset done(). The variables involved include migrate cap, chunk mode, mig state cap, mdev detach, log active, deferred reset, is err, and object changed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.