CVE-2026-64289

CVE-2026-64289 (Linux kernel) affects the iommufd path where iommufd_hwpt_invalidate() uses user-controlled entry_num and entry_len. The issue arises because these values were previously only bounded by U32_MAX, allowing excessively large inputs to drive the backend invalidation loop and cause pr...

EUVD-2026-49001

In the Linux kernel, the following vulnerability has been resolved: iommufd: Set upper bounds on cache invalidation entrynum and entrylen iommufdhwptinvalidate takes a user-controlled entrynum and entrylen, each bounded only by U32MAX. An entrylen beyond the kernel's struct size makes the copy...

CVE-2026-63794

The CVE-2026-63794 issue affects the Linux kernel KVM SEV path (sev_dbg_crypt) where the ENCRYPT path could overflow a single-page buffer when d_off > s_off, because the per-iteration transfer length wasn’t bounded by the destination page offset. The root cause is that len was bounded by (PAGE...