CVE-2026-74312

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vhost/vdpa component where the functions vhost vdpa mmap() and vhost vdpa fault() use vma->vm pgoff as a virtqueue index for get vq notification() without validating that the index is smaller than v->nvqs. While the ioctl path includes bounds checking and array index nospec(), the mmap and fault paths only verify that the index fits in u16. This allows an out-of-range queue index to reach driver-specific get vq notification() callbacks, potentially resulting in out-of-bounds access, invalid PFN remaps, and system crashes or Denial of Service (DoS).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.