CVE-2026-98242

A flaw was found in the Linux kernel's DMA-BUF subsystem. An integer truncation occurs when processing peer-to-peer Direct Memory Access (DMA) transfers with memory-mapped input/output regions exceeding four gigabytes. A local user could exploit this flaw to cause memory corruption, potentially leading to system instability and a Denial of Service (DoS).

Red Hat rates the security impact of this vulnerability as Moderate because successful exploitation requires local access and specific hardware setups performing peer-to-peer DMA operations across host bridges that handle memory-mapped I/O windows exceeding 4GB. Triggering the flaw depends on specialized multi-device data sharing across large address spaces, which substantially restricts real-world exposure in standard enterprise deployments. Earlier versions, including Red Hat Enterprise Linux 8 and 9, do not include the vulnerable implementation and are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.