CVE-2026-64456

Linux Kernel: Mehrere Schwachstellen

Debian Linux, Amazon Linux 2, Nutanix AOS, Red Hat Enterprise Linux, IBM QRadar SIEM, Red Hat OpenShift, Nutanix Prism…

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copy_data() random_recv_done() stores the device-reported used.len directly into vi->data_avail. copy_data() then indexes vi->data[] using vi->data_idx (advanced by previous copy_data() calls) and issues a memcpy() without re-validating either value against the posted buffer size sizeof(vi->data) (SMP_CACHE_BYTES bytes, typically 32 or 64). A malicious or…

25. Jul 2026

Ausgewertete Quellen

• Ubuntu
  USN-9066-1: Linux kernel (HWE) vulnerabilities
• CERT-Bund
  WID-SEC-2026-2527
• NVD
  CVE-2026-64456