Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2026-64529

Summary
Assigner-Linux
Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At-25 Jul, 2026 | 09:24
Updated At-25 Jul, 2026 | 09:24
Rejected At-
Credits

crypto: qat - remove unused character device and IOCTLs

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device (qat_adf_ctl) with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public uAPI header and have no known in-tree or out-of-tree users. Device lifecycle is already managed via sysfs. The ioctl interface also increases the attack surface and is the subject of a number of bug reports. Remove the character device, the IOCTL definitions, and the related data structures (adf_dev_status_info, adf_user_cfg_key_val, adf_user_cfg_section, adf_user_cfg_ctl_data). Drop the now-unused adf_cfg_user.h header and strip adf_ctl_drv.c down to the minimal module_init/module_exit hooks for workqueue, AER, and crypto/compression algorithm registration. Clean up leftover dead code that was only reachable from the removed IOCTL paths: adf_cfg_del_all(), adf_devmgr_verify_id(), adf_devmgr_get_num_dev(), adf_devmgr_get_dev_by_id(), adf_get_vf_real_id() and the unused ADF_CFG macros. Additionally, drop the entry associated to QAT IOCTLs in ioctl-number.rst.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:Linux
Assigner Org ID:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:25 Jul, 2026 | 09:24
Updated At:25 Jul, 2026 | 09:24
Rejected At:
▼CVE Numbering Authority (CNA)
crypto: qat - remove unused character device and IOCTLs

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device (qat_adf_ctl) with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public uAPI header and have no known in-tree or out-of-tree users. Device lifecycle is already managed via sysfs. The ioctl interface also increases the attack surface and is the subject of a number of bug reports. Remove the character device, the IOCTL definitions, and the related data structures (adf_dev_status_info, adf_user_cfg_key_val, adf_user_cfg_section, adf_user_cfg_ctl_data). Drop the now-unused adf_cfg_user.h header and strip adf_ctl_drv.c down to the minimal module_init/module_exit hooks for workqueue, AER, and crypto/compression algorithm registration. Clean up leftover dead code that was only reachable from the removed IOCTL paths: adf_cfg_del_all(), adf_devmgr_verify_id(), adf_devmgr_get_num_dev(), adf_devmgr_get_dev_by_id(), adf_get_vf_real_id() and the unused ADF_CFG macros. Additionally, drop the entry associated to QAT IOCTLs in ioctl-number.rst.

Affected Products
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • Documentation/userspace-api/ioctl/ioctl-number.rst
  • drivers/crypto/intel/qat/qat_common/adf_cfg.c
  • drivers/crypto/intel/qat/qat_common/adf_cfg.h
  • drivers/crypto/intel/qat/qat_common/adf_cfg_common.h
  • drivers/crypto/intel/qat/qat_common/adf_cfg_user.h
  • drivers/crypto/intel/qat/qat_common/adf_common_drv.h
  • drivers/crypto/intel/qat/qat_common/adf_ctl_drv.c
  • drivers/crypto/intel/qat/qat_common/adf_dev_mgr.c
Default Status
unaffected
Versions
Affected
  • From d8cba25d2c68992a6e7c1d329b690a9ebe01167d before 071590a44cbc38483fceb1ab943363ec26868e1b (git)
  • From d8cba25d2c68992a6e7c1d329b690a9ebe01167d before 1de076f43e64bf65fbe7280a269c70e0e60518df (git)
  • From d8cba25d2c68992a6e7c1d329b690a9ebe01167d before a4999664a5ef77bdb0c6e6b935f581ac8ce6b63a (git)
  • From d8cba25d2c68992a6e7c1d329b690a9ebe01167d before 6848a6e39cac44fdb7cb88f0f777df62172d1551 (git)
  • From d8cba25d2c68992a6e7c1d329b690a9ebe01167d before b1ea97076bd0a5196290deba172034e480646727 (git)
  • From d8cba25d2c68992a6e7c1d329b690a9ebe01167d before b8ebf008696de1ec08c90d51f94d7e40bd448be1 (git)
  • From d8cba25d2c68992a6e7c1d329b690a9ebe01167d before de2cc38489b629927910b1aeff69bba7bd5c6f1b (git)
  • From d8cba25d2c68992a6e7c1d329b690a9ebe01167d before 3ae49dd04dbb11fb73f17f58a982dba128abe83a (git)
  • From d8cba25d2c68992a6e7c1d329b690a9ebe01167d before d237230728c567297f2f98b425d63156ab2ed17f (git)
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • Documentation/userspace-api/ioctl/ioctl-number.rst
  • drivers/crypto/intel/qat/qat_common/adf_cfg.c
  • drivers/crypto/intel/qat/qat_common/adf_cfg.h
  • drivers/crypto/intel/qat/qat_common/adf_cfg_common.h
  • drivers/crypto/intel/qat/qat_common/adf_cfg_user.h
  • drivers/crypto/intel/qat/qat_common/adf_common_drv.h
  • drivers/crypto/intel/qat/qat_common/adf_ctl_drv.c
  • drivers/crypto/intel/qat/qat_common/adf_dev_mgr.c
Default Status
affected
Versions
Affected
  • 3.17
Unaffected
  • From 0 before 3.17 (semver)
  • From 5.10.260 through 5.10.* (semver)
  • From 5.15.211 through 5.15.* (semver)
  • From 6.1.177 through 6.1.* (semver)
  • From 6.6.144 through 6.6.* (semver)
  • From 6.12.95 through 6.12.* (semver)
  • From 6.18.37 through 6.18.* (semver)
  • From 7.0.14 through 7.0.* (semver)
  • From 7.1.2 through 7.1.* (semver)
  • From 7.2-rc1 through * (original_commit_for_fix)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://git.kernel.org/stable/c/071590a44cbc38483fceb1ab943363ec26868e1b
N/A
https://git.kernel.org/stable/c/1de076f43e64bf65fbe7280a269c70e0e60518df
N/A
https://git.kernel.org/stable/c/a4999664a5ef77bdb0c6e6b935f581ac8ce6b63a
N/A
https://git.kernel.org/stable/c/6848a6e39cac44fdb7cb88f0f777df62172d1551
N/A
https://git.kernel.org/stable/c/b1ea97076bd0a5196290deba172034e480646727
N/A
https://git.kernel.org/stable/c/b8ebf008696de1ec08c90d51f94d7e40bd448be1
N/A
https://git.kernel.org/stable/c/de2cc38489b629927910b1aeff69bba7bd5c6f1b
N/A
https://git.kernel.org/stable/c/3ae49dd04dbb11fb73f17f58a982dba128abe83a
N/A
https://git.kernel.org/stable/c/d237230728c567297f2f98b425d63156ab2ed17f
N/A
Hyperlink: https://git.kernel.org/stable/c/071590a44cbc38483fceb1ab943363ec26868e1b
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/1de076f43e64bf65fbe7280a269c70e0e60518df
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/a4999664a5ef77bdb0c6e6b935f581ac8ce6b63a
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/6848a6e39cac44fdb7cb88f0f777df62172d1551
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/b1ea97076bd0a5196290deba172034e480646727
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/b8ebf008696de1ec08c90d51f94d7e40bd448be1
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/de2cc38489b629927910b1aeff69bba7bd5c6f1b
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/3ae49dd04dbb11fb73f17f58a982dba128abe83a
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/d237230728c567297f2f98b425d63156ab2ed17f
Resource: N/A
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:25 Jul, 2026 | 10:17
Updated At:25 Jul, 2026 | 10:17

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device (qat_adf_ctl) with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public uAPI header and have no known in-tree or out-of-tree users. Device lifecycle is already managed via sysfs. The ioctl interface also increases the attack surface and is the subject of a number of bug reports. Remove the character device, the IOCTL definitions, and the related data structures (adf_dev_status_info, adf_user_cfg_key_val, adf_user_cfg_section, adf_user_cfg_ctl_data). Drop the now-unused adf_cfg_user.h header and strip adf_ctl_drv.c down to the minimal module_init/module_exit hooks for workqueue, AER, and crypto/compression algorithm registration. Clean up leftover dead code that was only reachable from the removed IOCTL paths: adf_cfg_del_all(), adf_devmgr_verify_id(), adf_devmgr_get_num_dev(), adf_devmgr_get_dev_by_id(), adf_get_vf_real_id() and the unused ADF_CFG macros. Additionally, drop the entry associated to QAT IOCTLs in ioctl-number.rst.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
CPE Matches

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://git.kernel.org/stable/c/071590a44cbc38483fceb1ab943363ec26868e1b416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/1de076f43e64bf65fbe7280a269c70e0e60518df416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/3ae49dd04dbb11fb73f17f58a982dba128abe83a416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/6848a6e39cac44fdb7cb88f0f777df62172d1551416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/a4999664a5ef77bdb0c6e6b935f581ac8ce6b63a416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/b1ea97076bd0a5196290deba172034e480646727416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/b8ebf008696de1ec08c90d51f94d7e40bd448be1416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/d237230728c567297f2f98b425d63156ab2ed17f416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/de2cc38489b629927910b1aeff69bba7bd5c6f1b416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
Hyperlink: https://git.kernel.org/stable/c/071590a44cbc38483fceb1ab943363ec26868e1b
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/1de076f43e64bf65fbe7280a269c70e0e60518df
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/3ae49dd04dbb11fb73f17f58a982dba128abe83a
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/6848a6e39cac44fdb7cb88f0f777df62172d1551
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/a4999664a5ef77bdb0c6e6b935f581ac8ce6b63a
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/b1ea97076bd0a5196290deba172034e480646727
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/b8ebf008696de1ec08c90d51f94d7e40bd448be1
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/d237230728c567297f2f98b425d63156ab2ed17f
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/de2cc38489b629927910b1aeff69bba7bd5c6f1b
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

0Records found

Details not found