CVE-2026-31748

kernel: comedi: me_daq: Fix potential overrun of firmware buffer

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 1, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's comedi: me_daq module. The me2600_xilinx_download() function, responsible for loading firmware, does not adequately validate the length of the provided firmware data stream. This vulnerability allows for a buffer overrun, which can lead to memory corruption within the kernel. This could potentially cause system instability or other undefined behavior.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1284 · Improper Validation of Specified Quantity in Input