CVE-2026-64529

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The QAT driver exposes a character device qat adf ctl that utilizes IOCTLs (Input/Output Control) for device configuration, start, stop, status query, and enumeration. This interface increases the attack surface and has been the subject of multiple bug reports. The issue involves the use of IOCTLs that are not part of any public uAPI header and have no known users, as device lifecycle management is already handled via sysfs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.