8.8

CVE-2026-64153: linux

CVSS: 8.8v3.1HighAnalyzed
AliasesUBUNTU-CVE-2026-64153DEBIAN-CVE-2026-64153
Published 19-07-2026Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2026-64153 is a high (CVSS 8.8) vulnerability in linux. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 2.9% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.14%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 32 · Related 32
USN-8575-1USN-8575-2USN-8575-3USN-8576-1USN-8576-2USN-8593-1

Timeline

  1. 19-07-2026
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Commit "iommu: return full error code from iommu_map_sg[_atomic]()" changed iommu_map_sgtable() to return an ssize_t and negative values in error cases, rather than a size_t and a zero. Store the return value in the appropriate type and in case of error, return it rather than WARNing. Patchwork: https://patchwork.freedesktop.org/patch/719685/

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.14%

Chance of exploitation in the next 30 days

Percentile

3%

Versus all other CVEs

30-day change

0.00 pp

From 0.14% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu155 products
  • linux< 5.15.0-186.196 | < 6.8.0-139.139 | < 7.0.0-28.28
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1112.119 | < 6.8.0-1064.67 | < 7.0.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b, < 3c2cdb7c07f664b77e2a75b50793b845d5742efa | ≥ ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b, < 3e3c3c95ef4fe17231a9149e27bcfc9dae2dd89f | ≥ ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b, < 7256e54583aee21e23929e7554278c2f5c1a08b1 | ≥ ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b, < 3457807aeb88077712f0a7cb65c3ca5120773d75 | ≥ ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b, < f4e37f3df436c2bdd2621c21f9c72c8f149a221d | ≥ ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b, < 3a45af37733446e114bf19b0209fe7d8089bdb8b | ≥ ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b, < 55e0f0d1c1a4ee1e46da7da4d443eb3044fb3851 | 5.15
  • linux_kernel≥ 5.15, < 5.15.209 | ≥ 5.16, < 6.1.175 | ≥ 6.2, < 6.6.142 | ≥ 6.7, < 6.12.92 | ≥ 6.13, < 6.18.34 | ≥ 6.19, < 7.0.11 | 7.1:rc1 | 7.1:rc2 | 7.1:rc3 | 7.1:rc4
Debian1 product
  • linux< 6.1.176-1 | < 6.12.94-1 | < 7.0.12-1

3 vendors · 158 products

References

43 links
Show all 43 references