Threats Tagged 'ghsa-hj85-3f53-vrg4'

A high-severity vulnerability in the Linux kernel's FPGA driver (dfl-afu) allows improper validation of a 64-bit DMA mapping length passed from userspace. The ioctl handler does not enforce an upper bound on the length, leading to an integer truncation when the length is converted to a page count, potentially causing memory corruption or escalation of privileges. The vulnerability is addressed by validating the length at the ioctl entry point and rejecting requests exceeding INT_MAX pages.