CVE-2026-80723
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/08/2026
Last modified:
28/08/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
of: reserved_mem: prevent OOB when too many dynamic regions are defined<br />
<br />
On boot, fdt_scan_reserved_mem() saves each dynamically-placed<br />
/reserved-memory subnode into a local array of size<br />
MAX_RESERVED_REGIONS.<br />
<br />
If the device tree defines more than MAX_RESERVED_REGIONS<br />
dynamically-placed regions, fdt_scan_reserved_mem() writes past the<br />
end of the local array.<br />
<br />
Add a bounds check that logs an error and skips the excess regions,<br />
restoring the original behavior.



