In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a… (CVE-2026-64529)
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device (qat_adf_ctl) with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public uAPI header and have no known in-tree or out-of-tree users. Device lifecycle is already managed via sysfs. The ioctl interface also increases the attack surface and is the subject of a number of bug reports. Remove the character device, the IOCTL definitions, and the related data structures (adf_dev_status_info, adf_user_cfg_key_val, adf_user_cfg_section, adf_user_cfg_ctl_data). Drop the now-unused adf_cfg_user.h header and strip adf_ctl_drv.c down to the minimal module_init/module_exit hooks for workqueue, AER, and crypto/compression algorithm registration. Clean up leftover dead code that was only reachable from the removed IOCTL paths: adf_cfg_del_all(), adf_devmgr_verify_id(), adf_devmgr_get_num_dev(), adf_devmgr_get_dev_by_id(), adf_get_vf_real_id() and the unused ADF_CFG macros. Additionally, drop the entry associated to QAT IOCTLs in ioctl-number.rst.
AI Analysis
Technical Summary
The Linux kernel QAT driver exposed a character device (qat_adf_ctl) with IOCTLs for device configuration and control that were unused and undocumented in any public user API. This unnecessary interface increased the kernel's attack surface and was linked to multiple bug reports. The fix involved removing the character device, IOCTLs, related data structures, and cleaning up dead code reachable only via these IOCTL paths. This reduces potential vulnerabilities by eliminating unused and potentially exploitable interfaces.
Potential Impact
The presence of unused IOCTL interfaces in the QAT driver increased the attack surface of the Linux kernel, potentially allowing attackers to exploit bugs in these interfaces. Removing these interfaces reduces the risk of exploitation related to this attack vector. No known exploits in the wild have been reported.
Mitigation Recommendations
A fix has been implemented in the Linux kernel by removing the unused character device and IOCTL interfaces from the QAT driver. Users should update to a Linux kernel version that includes this fix. Patch status is not explicitly confirmed in the provided data; users should consult the official Linux kernel advisories or vendor updates for the exact fixed versions and apply those updates accordingly.
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a… (CVE-2026-64529)
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device (qat_adf_ctl) with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public uAPI header and have no known in-tree or out-of-tree users. Device lifecycle is already managed via sysfs. The ioctl interface also increases the attack surface and is the subject of a number of bug reports. Remove the character device, the IOCTL definitions, and the related data structures (adf_dev_status_info, adf_user_cfg_key_val, adf_user_cfg_section, adf_user_cfg_ctl_data). Drop the now-unused adf_cfg_user.h header and strip adf_ctl_drv.c down to the minimal module_init/module_exit hooks for workqueue, AER, and crypto/compression algorithm registration. Clean up leftover dead code that was only reachable from the removed IOCTL paths: adf_cfg_del_all(), adf_devmgr_verify_id(), adf_devmgr_get_num_dev(), adf_devmgr_get_dev_by_id(), adf_get_vf_real_id() and the unused ADF_CFG macros. Additionally, drop the entry associated to QAT IOCTLs in ioctl-number.rst.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel QAT driver exposed a character device (qat_adf_ctl) with IOCTLs for device configuration and control that were unused and undocumented in any public user API. This unnecessary interface increased the kernel's attack surface and was linked to multiple bug reports. The fix involved removing the character device, IOCTLs, related data structures, and cleaning up dead code reachable only via these IOCTL paths. This reduces potential vulnerabilities by eliminating unused and potentially exploitable interfaces.
Potential Impact
The presence of unused IOCTL interfaces in the QAT driver increased the attack surface of the Linux kernel, potentially allowing attackers to exploit bugs in these interfaces. Removing these interfaces reduces the risk of exploitation related to this attack vector. No known exploits in the wild have been reported.
Mitigation Recommendations
A fix has been implemented in the Linux kernel by removing the unused character device and IOCTL interfaces from the QAT driver. Users should update to a Linux kernel version that includes this fix. Patch status is not explicitly confirmed in the provided data; users should consult the official Linux kernel advisories or vendor updates for the exact fixed versions and apply those updates accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-9fhf-pqwj-mfrc
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64529"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a6542059c2644c7f8081af2
Added to database: 07/25/2026, 23:08:53 UTC
Last enriched: 07/25/2026, 23:12:11 UTC
Last updated: 09/07/2026, 10:52:10 UTC
Views: 56
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.