9.8

CVE-2026-80617

net: airoha: fix foe_check_time allocation size

In the Linux kernel, the following vulnerability has been resolved:

net: airoha: fix foe_check_time allocation size

foe_check_time is declared as u16 pointer but was allocated with
only ppe_num_entries bytes instead of ppe_num_entries * sizeof(u16).

When airoha_ppe_foe_verify_entry() is called with hash >= ppe_num_entries/2,
it writes beyond the allocated buffer, causing heap buffer overflow and
potential kernel crash.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 56b99327a451917f1c17f85fc33ea8293c08a9ee
Version < 112b5eff24e044561ee9599a0d34e0fcea1df4e0
Status affected
Version 6d5b601d52a27aafff555b480e538507901c672c
Version < 9f7cd1e26d2f1766438edc9b9254f2c618f9ae98
Status affected
Version 6d5b601d52a27aafff555b480e538507901c672c
Version < 5c121ee635680c93d7074becf14cfbaac140f80d
Status affected
Version 6.18.33
Version < 6.18.40
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.19
Status affected
Version 0
Version < 6.19
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.5% 0.403
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/112b5eff24e044561ee9599a0d34e0fcea1df4e0
https://git.kernel.org/stable/c/9f7cd1e26d2f1766438edc9b9254f2c618f9ae98
https://git.kernel.org/stable/c/5c121ee635680c93d7074becf14cfbaac140f80d