CVE-2026-64449

CVE-2026-64449 relates to the Linux kernel staging/vme_user code. The vulnerability arises because the SLAVE-path helpers buffer_to_user() and buffer_from_user() copy count bytes using an unsafe offset (*ppos) into a fixed-size kern_buf (128 KiB), without bounding *ppos + count against size_buf. ...