CVE-2026-98155

A flaw was found in the Linux kernel's Qualcomm Cloud AI qaic driver. A compromised or malicious device could trigger a Denial of Service DoS or information disclosure by sending a malformed response message. Due to missing bounds checks during message processing, the driver may read beyond...

Linux kernel compute acceleration driver Heap Buffer Overflow DoS

The vulnerability in the qaicgemobjectmmap function within the drivers/accel/qaic/qaicdata.c file of the Linux kernel’s compute acceleration driver is related to buffer overflow conditions. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

CVE-2026-64051

A flaw was found in the Linux kernel's accel/qaic driver. This vulnerability allows for memory to be mapped beyond its intended boundaries during certain memory allocation operations. A local attacker could exploit this flaw, leading to a use-after-free condition. This could potentially result in...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a failure to process a DBC de-activation transaction in the qaic driver after a user leaves, which could...

CVE-2025-40172

CVE-2025-40172 is connected to the Linux kernel’s QAIC driver (drivers/accel/qaic/qaic_control.c). The issue arises in find_and_map_user_pages(): when a DMA transfer request from user space has a length of 0, or in a rare case the host/device signals QAIC_TRANS_DMA_XFER_CONT with resources->xf...

CVE-2025-22001 accel/qaic: Fix integer overflow in qaic_validate_req()

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix integer overflow in qaicvalidatereq These are u64 variables that come from the user via qaicattachsliceboioctl. Use checkaddoverflow to ensure that the math doesn't have an integer wrapping bug...