CVE-2026-64590
Description
A flaw was found in the Linux kernel's dma-buf subsystem, specifically within the udmabuf component. When the CONFIG_DMA_API_DEBUG_SG option is enabled, importing a udmabuf into a Direct Rendering Manager (DRM) driver can trigger a spurious warning about overlapping cacheline mappings. This occurs because udmabuf does not correctly pass the DMA_ATTR_SKIP_CPU_SYNC flag during scatter-gather list mapping, leading to redundant CPU cache synchronization and an unnecessary debugging alert. While the cacheline overlap itself is harmless when the correct flag is used, the presence of this warning indicates an inefficiency in resource handling within the kernel's DMA (Direct Memory Access) API debugging infrastructure.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Understanding the Weakness (CWE)
Integrity,Confidentiality,Other
Technical Impact: Modify Application Data; Read Application Data; Alter Execution Logic
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
