527 matches found
SUSE CVE-2026-72156
In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...
SUSE CVE-2026-72158
In the Linux kernel, the following vulnerability has been resolved: fpga: dfl: add bounds check in dfhgetparamsize dfhgetparamsize can return a parameter size larger than the feature region because the loop bounds check is evaluated before incrementing size. If the EOP End of Parameters bit is se...
MemProcFS v5.18
MemProcFS: MemProcFS is an easy and convenient way of viewing physical memory as files in a virtual file system. Easy trivial point and click memory analysis without the need for complicated commandline arguments! Access memory content and artifacts via files in a mounted virtual file system or v...
PT-2026-99055
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=553148335 Crash type: Heap-buffer-overflow READ 13 Crash state: decode get fpga diagnostics settings resp decode get fpga diagnostics settings resp fuzzer.cc...
Linux GPIO Kernel Heap Buffer Overflow DoS
The vulnerability of the qixiscpld gpioprobe function in the drivers/gpio/gpio-qixis-fpga.c driver module of the Linux operating system’s GPIO driver is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: fpga: dfl: added a bounds check in dfhgetparamsize The dfhgetparamsize function can return a parameter size that is larger than the feature region, because the loop’s bounds check is evaluated before increasing the size. If the E...
CVE-2026-72158
A flaw was found in the Linux kernel's FPGA Dynamic Function Link DFL subsystem. A malicious FPGA device can provide specially crafted parameter headers, causing the system to miscalculate the size of a feature region. This incorrect size can lead to a memory corruption vulnerability when data is...
CVE-2026-72156
A flaw was found in the Linux kernel's microchip-spi Field-Programmable Gate Array FPGA module. This vulnerability occurs in the mpfopsparseheader function when processing a bitstream. If a crafted bitstream sets the headersize to zero, the function attempts to read data from memory before the...
Linux Distros Unpatched Vulnerability : CVE-2026-72156
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader rea...
Linux Distros Unpatched Vulnerability : CVE-2026-72158
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fpga: dfl: add bounds check in dfhgetparamsize dfhgetparamsize can return a parameter size...
CVE-2026-72156
In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...
CVE-2026-72158
In the Linux kernel, the following vulnerability has been resolved: fpga: dfl: add bounds check in dfhgetparamsize dfhgetparamsize can return a parameter size larger than the feature region because the loop bounds check is evaluated before incrementing size. If the EOP End of Parameters bit is se...
UBUNTU-CVE-2026-72156
In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...
CVE-2026-72158
In the Linux kernel, the following vulnerability has been resolved: fpga: dfl: add bounds check in dfhgetparamsize dfhgetparamsize can return a parameter size larger than the feature region because the loop bounds check is evaluated before incrementing size. If the EOP End of Parameters bit is se...
UBUNTU-CVE-2026-72158
In the Linux kernel, the following vulnerability has been resolved: fpga: dfl: add bounds check in dfhgetparamsize dfhgetparamsize can return a parameter size larger than the feature region because the loop bounds check is evaluated before incrementing size. If the EOP End of Parameters bit is se...
CVE-2026-72156
In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...
CVE-2026-72158 fpga: dfl: add bounds check in dfh_get_param_size()
In the Linux kernel, the following vulnerability has been resolved: fpga: dfl: add bounds check in dfhgetparamsize dfhgetparamsize can return a parameter size larger than the feature region because the loop bounds check is evaluated before incrementing size. If the EOP End of Parameters bit is se...
EUVD-2026-58916
In the Linux kernel, the following vulnerability has been resolved: fpga: dfl: add bounds check in dfhgetparamsize dfhgetparamsize can return a parameter size larger than the feature region because the loop bounds check is evaluated before incrementing size. If the EOP End of Parameters bit is se...
CVE-2026-72158 fpga: dfl: add bounds check in dfh_get_param_size()
In the Linux kernel, the following vulnerability has been resolved: fpga: dfl: add bounds check in dfhgetparamsize dfhgetparamsize can return a parameter size larger than the feature region because the loop bounds check is evaluated before incrementing size. If the EOP End of Parameters bit is se...
CVE-2026-72158
CVE-2026-72158 concerns the Linux kernel’s FPGA DFH handling in the dfl driver. The flaw: dfh_get_param_size() could report a parameter size larger than the feature region because the loop bounds check ran before incrementing size, and if EOP was set in the same iteration, an inflated size bypass...