THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64280 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() afu_ioctl_dma_map() accepts a 64-bit length from userspace via DFL_FPGA_PORT_DMA_MAP ioctl without an upper bound check. The value is passed to

[NVD] CVE-2026-64280 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() afu_ioctl_dma_map() accepts a 64-bit length from userspace via DFL_FPGA_PORT_DMA_MAP ioctl without an upper bound check. The value is passed to

mednvdPublished 2026-07-25

CVE-2026-64280 CVSS: 8.8 HIGH Published: 2026-07-25T10:17:08.553

In the Linux kernel, the following vulnerability has been resolved:

fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()

afu_ioctl_dma_map() accepts a 64-bit length from userspace via DFL_FPGA_PORT_DMA_MAP ioctl without an upper bound check. The value is passed to afu_dma_pin_pages() where npages is derived as length

Indicators of compromise

CVE-2026-64280cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64280