CVE-2026-80706

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the fw parse() function where it reads a fixed record header, a firmware-provided payload, and a trailing checksum without verifying the end of the firmware blob, which may allow reads to exceed the blob boundaries if a record is truncated. Additionally, the record provides addresses and lengths for writes into DPRAM (Dual-Port RAM, a type of memory shared between two processors). The generic loader utilizes mixed signed arithmetic for bounds checks that is prone to wrapping, and the application loader fails to bound the staging copy entirely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.