CVE-2026-64590 Linux CVE debrief

Who should care

Linux kernel developers and users who utilize dma-buf/udmabuf in their systems, particularly those responsible for maintaining and securing Linux kernel-based systems, should be aware of this vulnerability. They should review and apply necessary patches to address the cacheline tracking EEXIST warning in dma-buf/udmabuf. Additionally, users of DRM drivers, such as amdgpu for video playback, should ensure their systems are updated to mitigate potential security risks associated with this vulnerability. This includes evaluating the impact on their specific use cases and taking appropriate measures to protect against potential attacks. Linux distributions and maintainers should prioritize patching this vulnerability to prevent exploitation. Security teams should monitor for similar cacheline tracking issues in other dma-buf exporters and ensure their incident response plans account for potential exploitation of this vulnerability. System administrators should verify that their systems are patched and up-to-date, and consider implementing compensating controls for exposed systems while remediation is scheduled and verified. Vulnerability management teams should track exceptions, retest remediated assets, and close the item only after evidence is documented. This requires coordination with Linux kernel developers, DRM driver maintainers, and affected users to ensure comprehensive mitigation of the vulnerability. The vulnerability affects Linux kernel developers, DRM driver maintainers, and users of Linux kernel-based systems, requiring a coordinated effort to address the issue. Linux kernel developers and maintainers should work together to resolve the issue and prevent similar problems in the future. The issue requires attention from Linux kernel developers, DRM driver maintainers, and users of Linux kernel-based systems to ensure the vulnerability is properly mitigated. Linux kernel developers and DRM driver maintainers should collaborate to address the vulnerability and prevent similar issues from arising in the future. The vulnerability has implications for Linux kernel developers, DRM driver maintainers, and users of Linux kernel-based systems, highlighting the

Technical summary

The Linux kernel has a vulnerability that triggers a spurious warning when importing a udmabuf into a DRM driver with CONFIG_DMA_API_DEBUG_SG enabled. The warning is caused by overlapping cacheline mappings. The DMA_ATTR_SKIP_CPU_SYNC flag can suppress this check and skip redundant CPU sync. The CPU sync at map/unmap time is also redundant for udmabuf as it performs explicit cache synchronization.

Defensive priority

Apply kernel updates to address cacheline tracking EEXIST warning in dma-buf/udmabuf.

Recommended defensive actions

• Apply kernel updates to address cacheline tracking EEXIST warning in dma-buf/udmabuf
• Review and apply DMA_ATTR_SKIP_CPU_SYNC flag for udmabuf
• Monitor for similar cacheline tracking issues in other dma-buf exporters
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The warning occurs when dma-buf/udmabuf is imported into a DRM driver with CONFIG_DMA_API_DEBUG_SG enabled. The issue arises from overlapping cacheline mappings. The DMA_ATTR_SKIP_CPU_SYNC flag can be used to suppress this check. The CPU sync at map/unmap time is also redundant for udmabuf as it performs explicit cache synchronization.

Official resources