CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy
In the Linux kernel, the following vulnerability has been resolved:
nvmem: zynqmpnvmem: Fix buffer size in DMA and memcpy
Buffer size used in dma allocation and memcpy is wrong. It can lead to undersized DMA buffer access and possible memory corruption. use correct buffer size in dmaalloccoherent and memcpy.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The CVSS vector indicates local access and low privileges are required. No user interaction is required.
What is the potential impact if exploitation succeeds?
The flawed DMA allocation and memcpy buffer sizing can cause undersized DMA buffer access and memory corruption. The CVSS vector rates confidentiality, integrity, and availability impact as high.
Which systems are exposed?
The affected component is the Linux kernel zynqmp_nvmem NVMEM driver. Systems that do not use this driver are not identified as affected by the provided data.
What is the remediation?
Update to a Linux kernel release that includes the buffer-size correction in dma_alloc_coherent and memcpy. The provided references identify stable kernel commits containing the fix.