The Linux kernel vulnerability CVE-2026-64042 concerns the vfio/pci driver where DMABUF exports access to BAR (Base Address Register) resources. Although BAR resources are requested at startup, the kernel did not verify that these resources were truly reserved before allowing access via DMABUF exports. This flaw could allow access to unreserved BAR resources, potentially leading to unauthorized memory access. The fix involved adding a validation step in the DMABUF creation process to confirm BAR resource reservation before export.

The vulnerability could allow unauthorized access to unreserved BAR resources through DMABUF exports, potentially exposing kernel memory or device resources that should not be accessible. No known exploits in the wild have been reported. The impact is limited to systems using the affected vfio/pci functionality in the Linux kernel.

A fix has been implemented in the Linux kernel to add a check ensuring BAR resources are reserved before exporting a DMABUF. Users should apply the official kernel updates that include this patch. Patch status is not explicitly stated in the provided data; therefore, check the Linux kernel vendor advisory or distribution security advisories for the exact fixed versions and apply updates accordingly.