2 matches found
SUSE CVE-2026-64289
In the Linux kernel, the following vulnerability has been resolved: iommufd: Set upper bounds on cache invalidation entrynum and entrylen iommufdhwptinvalidate takes a user-controlled entrynum and entrylen, each bounded only by U32MAX. An entrylen beyond the kernel's struct size makes the copy...
5.5CVSS5.8AI score0.00159EPSS
SaveExploits0References3
PT-2026-64510
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The iommufd hwpt invalidate function fails to properly validate user-controlled entry num and entry len variables, which are only bounded by U32 MAX. A multi-gigabyte entry len can force...
5.5CVSS5.7AI score0.00159EPSS
SaveExploits0
20