CVE-2026-64430

CVE CVE-2026-64430EUVD EUVD-2026-48774Published 2026-07-25T08:51:06.000ZLast changed 2026-08-05T12:41:54.000ZCVSS 7.5

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid calling pci_irq_vector() from hardirq context ntb_epf_vec_isr() calls pci_irq_vector() in hardirq context to derive the vector number. pci_irq_vector() calls msi_get_virq() that takes a mutex and can therefore trigger "scheduling while atomic" splats: BUG: scheduling while atomic: kworker/u33:0/55/0x00010001 ... Call trace: ... schedule+0x38/0x110 schedule_preempt_disabled+0x28/0x50 __mutex_lock.constprop.0+0x848/0x908 __mutex_lock_slowpath+0x18/0x30 mutex_lock+0x4c/0x60 msi_domain_get_virq+0xe8/0x138 pci_irq_vector+0x2c/0x60 ntb_epf_vec_isr+0x28/0x120 [ntb_hw_epf] __handle_irq_event_percpu+0x70/0x3a8 handle_irq_event+0x48/0x100 handle_edge_irq+0x100/0x1c8 ... Cache the Linux IRQ number for vector 0 when vectors are allocated and use it as a base in the ISR. Running the ISR in a threaded IRQ handler would also avoid the problem, but that would be unnecessary here.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

Linux — Linux patch: 7.1.4; patch: 6.12.96; patch: 6.18.39; 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb <4dcddc1c794d1c65eda68f1f8dd04a0fecc0870f; patch: 6.6.145; patch: 7.2-rc1; 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb <33bba331a4a5fee8b6026fe72eca13cceeec1b7b; patch: 6.1.178; 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb <aff271b12a1eb8c8b3da19223ae1a6abe1e8168b; patch: 0; 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb <f71e8d9875069fa73e335f63f02ec6e52e3aaa51; 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb <174a97f21bf9c54fa37ec0f321692e862ea130a3; 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb <6350df503897d57c5634f71b0767d48c3b837583; patch: 5.15.212; 5.12; 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb <1dba8444ac0100133d72374634f6d7451fff1ccc

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

Linux — Linux

Does this concern one of your customers?

This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.

Try it for 28 days

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.