CVE-2026-31743
highIn the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy Buffer size used in dma allocation…
Vendor / product: Linux — linux kernel
In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy Buffer size used in dma allocation and memcpy is wrong. It can lead to undersized DMA buffer access and possible memory corruption. use correct buffer size in dma_alloc_coherent and memcpy.
CVSS
7.8
7.8 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity source: NVD CVSS v3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
Timeline (UTC)
Published: 2026-05-01 15:16
Modified: 2026-11-11 21:10
NVD status: Analyzed
Last synced 5 hours ago
Verified against the source API 2026-11-11 21:11 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
linux / linux_kernel ≥6.9 <6.12.81, ≥6.13 <6.18.22, ≥6.19 <6.19.12, 7.0
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://git.kernel.org/stable/c/2f6e5b9964d0a63a5ba84fca2642876afb70a662
Patch / mitigation: https://git.kernel.org/stable/c/6c01e7f11f5e5f22285d19510a9643e2506e13c3
Patch / mitigation: https://git.kernel.org/stable/c/784ed4abded1ca4b525fa4cade8b02f8c5d2a087
Patch / mitigation: https://git.kernel.org/stable/c/f9b88613ff402aa6fe8fd020573cb95867ae947e
References
- https://git.kernel.org/stable/c/2f6e5b9964d0a63a5ba84fca2642876afb70a662 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/6c01e7f11f5e5f22285d19510a9643e2506e13c3 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/784ed4abded1ca4b525fa4cade8b02f8c5d2a087 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/f9b88613ff402aa6fe8fd020573cb95867ae947e 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Data sources
NVD CVE API 2.0 — fetched 2026-11-11 21:11 UTC · record ↗