CVE-2026-64529

A flaw was found in the Linux kernel's QAT (QuickAssist Technology) driver. Unused character devices and IOCTLs (Input/Output Control) were exposed, which increased the potential attack surface. Removing these interfaces reduces the risk of future vulnerabilities and improves the overall security posture of the system.

This flaw is evaluated with a Moderate severity rating because exploitation requires local authenticated access on systems equipped with specialized Intel QuickAssist Technology (QAT) hardware, constraining the overall blast radius. Standard enterprise deployments without QAT accelerator hardware do not load the affected interfaces. Even on systems hosting QAT accelerators, device configuration and lifecycle management are routinely performed through sysfs rather than the exposed control device. Older releases such as Red Hat Enterprise Linux 8 are not affected as the relevant code paths are not present.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.