PT-2026-64501 · Linux · Linux
CVE-2026-64280
·
Published
2026-07-25
·
Updated
2026-07-25
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
fpga: dfl-afu: validate DMA mapping length in afu dma map region()
afu ioctl dma map() accepts a 64-bit length from userspace via
DFL FPGA PORT DMA MAP ioctl without an upper bound check. The value
is passed to afu dma pin pages() where npages is derived as
length >> PAGE SHIFT and passed to pin user pages fast() which takes
int nr pages, causing implicit truncation if length is very large.
Validate map.length at the ioctl entry point before calling
afu dma map region(), rejecting values whose page count exceeds
INT MAX.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux