CVE-2026-64280

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where afu ioctl dma map() accepts a 64-bit length from userspace via the DFL FPGA PORT DMA MAP ioctl without an upper bound check. This value is passed to afu dma pin pages(), where the number of pages is calculated as length shifted by PAGE SHIFT. This result is then passed to pin user pages fast(), which expects an integer for the number of pages, leading to implicit truncation if the provided length is excessively large.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.