CVE-2026-64124

kernel: net: devmem: reject dma-buf bind with non-page-aligned size or SG length

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's network device memory (net: devmem) component. This vulnerability allows an attacker to trigger an out-of-bounds read by providing specially crafted Direct Memory Access (DMA) buffers with non-page-aligned sizes or Scatter-Gather (SG) list lengths. This could lead to information disclosure or memory corruption, potentially impacting system stability and data integrity.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-125 · Out-of-bounds Read