CVE-2026-80723

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/08/2026
Last modified:
28/08/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> of: reserved_mem: prevent OOB when too many dynamic regions are defined<br /> <br /> On boot, fdt_scan_reserved_mem() saves each dynamically-placed<br /> /reserved-memory subnode into a local array of size<br /> MAX_RESERVED_REGIONS.<br /> <br /> If the device tree defines more than MAX_RESERVED_REGIONS<br /> dynamically-placed regions, fdt_scan_reserved_mem() writes past the<br /> end of the local array.<br /> <br /> Add a bounds check that logs an error and skips the excess regions,<br /> restoring the original behavior.

Impact