PT-2026-83023 · Linux · Linux

CVE-2026-80723

·

Published

2026-08-28

·

Updated

2026-08-28

CVSS v3.1

8.4

High

VectorAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the Linux kernel, the following vulnerability has been resolved:
of: reserved mem: prevent OOB when too many dynamic regions are defined
On boot, fdt scan reserved mem() saves each dynamically-placed /reserved-memory subnode into a local array of size MAX RESERVED REGIONS.
If the device tree defines more than MAX RESERVED REGIONS dynamically-placed regions, fdt scan reserved mem() writes past the end of the local array.
Add a bounds check that logs an error and skips the excess regions, restoring the original behavior.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-80723

Affected Products

Linux