Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-64042

vfio/pci: Check BAR resources before exporting a DMABUF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Check BAR resources before exporting a DMABUF A DMABUF exports access to BAR resources and, although they are requested at startup time, we need to ensure they really were reserved before exporting. Otherwise, it's possible to access unreserved resources through the export. Add a check to the DMABUF-creation path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5d74781ebc86c5fa9e9d6934024c505412de9b52 to < 8443cd4497a4498c4b01058d76a92116244cb605affected
  • 5d74781ebc86c5fa9e9d6934024c505412de9b52 to < 702809dabdecca807bdd50cfdcc1c980feb2ba62affected

Linux Linux

Default version status: affected

  • 6.19affected
  • 0 to < 6.19unaffected
  • 7.0.11 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References