CVE-2026-64457

A flaw was found in the Linux kernel's virtiopci component. A local user with permissions to unbind a virtio balloon device can trigger a NULL pointer dereference. This occurs due to an indexing mismatch when the vpdelvqs function attempts to look up virtqueue information, leading to an access of...