CVE-2023-26242

afu_mmio_region_get_by_offset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow.

Red Hat Enterprise Linux kernels are not affected by this vulnerability because the FPGA DFL (Device Feature List) subsystem, including the AFU (Accelerated Function Unit) driver (CONFIG_FPGA_DFL_AFU), is not enabled in any RHEL kernel configuration. The vulnerable code is not compiled into RHEL kernels across all supported versions (RHEL 6 through RHEL 10).

Fedora kernels do compile the FPGA DFL AFU driver as a module (CONFIG_FPGA_DFL_AFU=m), but the upstream fix has been included in Fedora kernels since early 2023.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.