fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.15 % · percentile 4 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() The "hdr.count * sizeof(s32)" multiplication can overflow on 32 bit systems leading to memory corruption. Use array_size() to fix that.
References
- https://git.kernel.org/stable/c/f59861946fa51bcc1f305809e4ebc1013b0ee61c
- https://git.kernel.org/stable/c/b94605f5cb99e90c8ca91523597a40e1bd59546b
- https://git.kernel.org/stable/c/1b5a931594f7ffd26d706614c37d4da0f2ffb6e7
- https://git.kernel.org/stable/c/940253af8b3865b76de8d1b46bcd4a700104852e
- https://git.kernel.org/stable/c/939bc5453b8cbdde9f1e5110ce8309aedb1b501a
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
European references
- ENISA EUVD · EUVD-2022-55689
- GCVE · GCVE-0-2022-50623
CERT-FR advisories
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0128 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 322b598be4d9b9090cda560c4caab78704615ab4 < f59861946fa51bcc1f305809e4ebc1013b0ee61c ; affected 322b598be4d9b9090cda560c4caab78704615ab4 < b94605f5cb99e90c8ca91523597a40e1bd59546b ; affected 322b598be4d9b9090cda560c4caab78704615ab4 < 1b5a931594f7ffd26d706614c37d4da0f2ffb6e7 ; affected 322b598be4d9b9090cda560c4caab78704615ab4 < 940253af8b3865b76de8d1b46bcd4a700104852e ; affected 322b598be4d9b9090cda560c4caab78704615ab4 < 939bc5453b8cbdde9f1e5110ce8309aedb1b501a |
| Linux · Linux | affected 5.9 ; unaffected 0 < 5.9 ; unaffected 5.10.150 ≤ 5.10.* ; unaffected 5.15.75 ≤ 5.15.* ; unaffected 5.19.17 ≤ 5.19.* ; unaffected 6.0.3 ≤ 6.0.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |