In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: Validate PCI BAR size before mapping The amd_sfh driver maps PCI… (CVE-2026-98640)

The amd_sfh driver in the Linux kernel maps PCI BAR 2 using pcim_iomap_regions() and accesses MMIO registers up to offset 0x10958. However, it did not verify that BAR 2's size was sufficient to cover these accesses. If bound to a device with a smaller BAR 2, this results in out-of-bounds memory access and a page fault during the probe function. The fix involves checking that BAR 2 is at least 128KB in size before mapping, ensuring safe access since PCI BAR sizes are powers of two and the maximum accessed offset requires at least 128KB.

This vulnerability can cause kernel page faults and crashes during device probing if the driver accesses memory beyond the allocated BAR 2 size. This may lead to system instability or denial of service on affected systems running the vulnerable driver.

A fix is available that validates the PCI BAR 2 size before mapping it in the amd_sfh driver. Systems should apply the updated Linux kernel version containing this fix. Since this is a kernel driver issue, updating the kernel to a patched version is the recommended remediation.