CVE-2026-80617

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A heap buffer overflow exists in the Linux kernel within the airoha component. The foe check time pointer, declared as a u16 type, is allocated with only ppe num entries bytes instead of the required ppe num entries * sizeof(u16). When the airoha ppe foe verify entry() function is called with a hash value greater than or equal to ppe num entries/2, it writes beyond the allocated buffer, which can lead to a kernel crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.