8.4

CVE-2026-80723

of: reserved_mem: prevent OOB when too many dynamic regions are defined

In the Linux kernel, the following vulnerability has been resolved:

of: reserved_mem: prevent OOB when too many dynamic regions are defined

On boot, fdt_scan_reserved_mem() saves each dynamically-placed
/reserved-memory subnode into a local array of size
MAX_RESERVED_REGIONS.

If the device tree defines more than MAX_RESERVED_REGIONS
dynamically-placed regions, fdt_scan_reserved_mem() writes past the
end of the local array.

Add a bounds check that logs an error and skips the excess regions,
restoring the original behavior.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 9a0fe62f93ede02c27aaca81112af1e59c8c0979
Version < 68d27250c9e81ab7764603e346c2b1017cb53adf
Status affected
Version 8a6e02d0c00e7b62e6acb74146878bb91e9e7e31
Version < cfa7e2734877330d6c10e0f33953905486c4530c
Status affected
Version 8a6e02d0c00e7b62e6acb74146878bb91e9e7e31
Version < de8ccbd6bf4efe7a059e2c483789936009e10f42
Status affected
Version 8a6e02d0c00e7b62e6acb74146878bb91e9e7e31
Version < db3dbdfea1b8f38774419c5c2c14e4b81c48708d
Status affected
Version 6.12.13
Version < 6.12.103
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.13
Status affected
Version 0
Version < 6.13
Status unaffected
Version <= 6.12.*
Version 6.12.103
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.032
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/68d27250c9e81ab7764603e346c2b1017cb53adf
https://git.kernel.org/stable/c/cfa7e2734877330d6c10e0f33953905486c4530c
https://git.kernel.org/stable/c/de8ccbd6bf4efe7a059e2c483789936009e10f42
https://git.kernel.org/stable/c/db3dbdfea1b8f38774419c5c2c14e4b81c48708d