CVE-2026-64018 | Linux Kernel up to 7.0.10 Mana mana_hwc_rx_event_handler rx_req_idx out-of-bounds

A vulnerability was found in Linux Kernel up to 7.0.10. It has been rated as very critical. The affected element is the function mana_hwc_rx_event_handler of the component Mana. The manipulation of the argument rx_req_idx leads to out-of-bounds read.

This vulnerability is uniquely identified as CVE-2026-64018. The attack is possible to be carried out remotely. No exploit exists.