CVE-2026-64280

Analyzed Analyzed - Analysis Complete

Integer Overflow in Linux Kernel FPGA AFU DMA Mapping

Publication date: 2026-07-25

Last updated on: 2026-08-13

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() afu_ioctl_dma_map() accepts a 64-bit length from userspace via DFL_FPGA_PORT_DMA_MAP ioctl without an upper bound check. The value is passed to afu_dma_pin_pages() where npages is derived as length >> PAGE_SHIFT and passed to pin_user_pages_fast() which takes int nr_pages, causing implicit truncation if length is very large. Validate map.length at the ioctl entry point before calling afu_dma_map_region(), rejecting values whose page count exceeds INT_MAX.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-25

Last Modified

2026-08-13

Generated

2026-08-14

AI Q&A

2026-07-25

EPSS Evaluated

2026-08-13

NVD

CVE-2026-64280

EUVD

EUVD-2026-48992

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.13 (inc) to 6.18.39 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.1.4 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.101 (exc)
linux	linux_kernel	From 4.19 (inc) to 6.6.148 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's FPGA driver. It allows a user to pass an extremely large DMA mapping length via an ioctl call without proper validation. The kernel then incorrectly calculates the number of pages to map, leading to potential memory corruption or system instability.

Detection Guidance

This vulnerability involves improper validation of DMA mapping length in the Linux kernel's FPGA driver. To detect it, check kernel logs for errors related to afu_dma_map_region or DFL_FPGA_PORT_DMA_MAP. Monitor for crashes or hangs in FPGA-related processes. Use commands like dmesg | grep -i afu or journalctl -k | grep -i afu to inspect kernel logs.

Impact Analysis

An attacker with local access could exploit this to crash the system, corrupt memory, or escalate privileges. It may also allow unauthorized access to sensitive kernel memory, posing a security risk to the entire system.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level kernel memory handling issue. Compliance risks would only arise if exploitation led to unauthorized data access or system compromise, which is not specified in the provided context.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. If patches are unavailable, restrict access to the DFL_FPGA_PORT_DMA_MAP ioctl via kernel module parameters or SELinux policies. Avoid running untrusted userspace applications with FPGA access until the kernel is updated.

Hi! I’m here to help you understand CVE-2026-64280. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70