What is the CVSS score of EUVD-2026-45803?

EUVD-2026-45803 has a CVSS 3.1 base score of 8.4 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by EUVD-2026-45803?

A memory-corruption vulnerability (CVE-2026-64118) in the Linux kernel QLogic FastLinQ Ethernet driver affects organizations with high-performance network infrastructure, creating denial-of-service…. A patch is available.

How to fix or mitigate EUVD-2026-45803?

Within 24 hours, inventory all systems using QLogic FastLinQ 40/100G Ethernet adapters and verify the current kernel version against the affected range (through v7.1-rc3); prioritize data center and mission-critical network infrastructure. Within 7 days, apply the available kernel patch to all identified systems, beginning with non-production environments to validate stability. Within 30 days, complete patching of all production systems, coordinate with network operations to schedule reboots during maintenance windows, and verify system stability post-patch.

Linux Kernel EUVD-2026-45803

| CVE-2026-64118 HIGH

Double Free (CWE-415)

2026-07-19 Linux

GHSA-wf22-p86j-w6w4

Information Disclosure Linux

8.4

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

8.4 HIGH

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

5.3 MEDIUM

Local init-path bug needing driver load access (PR:L) and a hard-to-force allocation failure (AC:H); impact is heap corruption/crash (A:H, I:L), no info leak (C:N).

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

4.0 AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

SUSE

HIGH

qualitative

Red Hat

5.5 MEDIUM

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 20, 2026 - 17:34 vuln.today

CVSS changed

Jul 20, 2026 - 15:22 NVD

8.4 (HIGH)

Patch available

Jul 19, 2026 - 17:03 EUVD

CVE Published

Jul 19, 2026 - 15:40 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 19, 2026 - 15:40 cve.org

HIGH 8.4

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

qed: fix double free in qed_cxt_tables_alloc()

If one of the later PF or VF CID bitmap allocations fails, qed_cid_map_alloc() jumps to cid_map_fail and frees the previously allocated CID bitmaps before returning an error. qed_cxt_tables_alloc() then calls qed_cxt_mngr_free(), which invokes qed_cid_map_free() again.

Fix this by setting each CID bitmap pointer to NULL after bitmap_free() to avoid double free.

The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1-rc3.

Runtime reproduction was not attempted because exercising the failing allocation path requires device-specific setup.

AnalysisAI

Memory-corruption (double free) in the Linux kernel's qed driver (QLogic FastLinQ 40/100G Ethernet) occurs when a PF/VF CID bitmap allocation fails during qed_cxt_tables_alloc(): the error path in qed_cid_map_alloc() frees already-allocated bitmaps, and the subsequent qed_cxt_mngr_free() cleanup frees them a second time. The bug is present from the driver's introduction through v7.1-rc3 and was surfaced by an experimental kernel memory-analysis tool; no public exploit identified at time of analysis and it is not in CISA KEV. Exploitation requires the specific hardware and a triggered allocation failure, so despite the CVSS 8.4 the practical risk is limited to local denial of service on affected NIC hosts.

Technical ContextAI

The affected code is drivers/net/ethernet/qlogic/qed, the driver for Marvell/QLogic FastLinQ 40/100GbE adapters. During context-manager initialization, qed_cxt_tables_alloc() sets up connection-ID (CID) bitmaps for physical functions (PF) and virtual functions (VF) via qed_cid_map_alloc(). On a partial-failure path the helper frees the bitmaps it already allocated but leaves the freed pointers dangling; the caller's teardown, qed_cxt_mngr_free() → qed_cid_map_free(), then calls bitmap_free() on those same stale pointers. This is a classic CWE-415 double-free (the NVD CWE field is N/A, but the root cause class is unambiguous from the changelog). The fix sets each CID bitmap pointer to NULL immediately after bitmap_free() so the second free becomes a no-op. Note the vendor tag 'Information Disclosure' does not match the code: this is a use-after-free/double-free memory-management fault, not an info-leak primitive.

RemediationAI

Vendor-released patch: update to the fixed stable release for your branch - 5.10.259, 5.15.210, 6.1.175, 6.6.142, 6.12.92, 6.18.34, 7.0.11, or mainline 7.1 - which sets each CID bitmap pointer to NULL after bitmap_free(). Apply the distribution kernel update that incorporates the corresponding stable commit (references at https://git.kernel.org/stable/c/a04c207f0801abdd23a169b5f902a9845059a65a and the other listed git.kernel.org commits). If patching must be deferred and the host does not use QLogic FastLinQ NICs, blacklist the qed module (and dependent qede/qedr/qedi/qedf) via modprobe to remove the code path entirely - the trade-off is loss of those adapters' functionality, so only do this where the hardware is absent. Because the bug is confined to an allocation-failure path during init, reducing memory pressure at boot/driver-load time also lowers the already-low trigger likelihood.

Same weakness CWE-415 – Double Free

View all

CVE-2014-0502 HIGH POC

8.8

CVE-2018-0101 CRITICAL POC

10.0

CVE-2023-25136 MEDIUM POC

6.5

CVE-2026-33824 CRITICAL POC

9.8

CVE-2014-1767 HIGH POC

7.2

CVE-2016-5768 CRITICAL POC

9.8

CVE-2016-5772 CRITICAL POC

9.8

CVE-2016-3132 CRITICAL POC

9.8

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Important

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

EUVD-2026-45803 vulnerability details – vuln.today

Back

Linux Kernel EUVD-2026-45803

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-415 – Double Free

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code