CVE-2026-80723
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
of: reserved_mem: prevent OOB when too many dynamic regions are defined
In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB when too many dynamic regions are defined On boot, fdt_scan_reserved_mem() saves each dynamically-placed /reserved-memory subnode into a local array of size MAX_RESERVED_REGIONS. If the device tree defines more than MAX_RESERVED_REGIONS dynamically-placed regions, fdt_scan_reserved_mem() writes past the end of the local array. Add a bounds check that logs an error and skips the excess regions, restoring the original behavior.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 9a0fe62f93ede02c27aaca81112af1e59c8c0979 | affected | git | 68d27250c9e81ab7764603e346c2b1017cb53adf | Unavailable | None listed |
| 8a6e02d0c00e7b62e6acb74146878bb91e9e7e31 | affected | git | cfa7e2734877330d6c10e0f33953905486c4530c | Unavailable | None listed |
| 8a6e02d0c00e7b62e6acb74146878bb91e9e7e31 | affected | git | de8ccbd6bf4efe7a059e2c483789936009e10f42 | Unavailable | None listed |
| 8a6e02d0c00e7b62e6acb74146878bb91e9e7e31 | affected | git | db3dbdfea1b8f38774419c5c2c14e4b81c48708d | Unavailable | None listed |
| 6.12.13 | affected | semver | 6.12.103 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.13 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.13 | Unavailable | None listed |
| 6.12.103 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.44 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.1.8 | unaffected | semver | Unavailable | 7.1.* | None listed |
| 7.2 | unaffected | original_commit_for_fix | Unavailable | * | None listed |