PT-2026-83023 · Linux · Linux
CVE-2026-80723
·
Published
2026-08-28
·
Updated
2026-08-28
CVSS v3.1
8.4
High
| Vector | AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
In the Linux kernel, the following vulnerability has been resolved:
of: reserved mem: prevent OOB when too many dynamic regions are defined
On boot, fdt scan reserved mem() saves each dynamically-placed
/reserved-memory subnode into a local array of size
MAX RESERVED REGIONS.
If the device tree defines more than MAX RESERVED REGIONS
dynamically-placed regions, fdt scan reserved mem() writes past the
end of the local array.
Add a bounds check that logs an error and skips the excess regions,
restoring the original behavior.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux