CVE-2026-64018

The Linux kernel vulnerability CVE-2026-64018 affects net: mana: validate rx_req_idx to prevent out-of-bounds array access. Root cause: mana_hwc_rx_event_handler() uses rx_req_idx derived from sge->address in DMA-coherent memory, and in Confidential VMs (SEV-SNP/TDX) this memory is shared unen...

EUVD-2026-45591

In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rxreqidx to prevent out-of-bounds array access In manahwcrxeventhandler, rxreqidx is derived from sge-address in DMA-coherent memory. In Confidential VMs SEV-SNP/TDX, this memory is shared unencrypted and HW c...

CVE-2026-64018 net: mana: validate rx_req_idx to prevent out-of-bounds array access

In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rxreqidx to prevent out-of-bounds array access In manahwcrxeventhandler, rxreqidx is derived from sge-address in DMA-coherent memory. In Confidential VMs SEV-SNP/TDX, this memory is shared unencrypted and HW c...