Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-80723

of: reserved_mem: prevent OOB when too many dynamic regions are defined

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB when too many dynamic regions are defined On boot, fdt_scan_reserved_mem() saves each dynamically-placed /reserved-memory subnode into a local array of size MAX_RESERVED_REGIONS. If the device tree defines more than MAX_RESERVED_REGIONS dynamically-placed regions, fdt_scan_reserved_mem() writes past the end of the local array. Add a bounds check that logs an error and skips the excess regions, restoring the original behavior.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9a0fe62f93ede02c27aaca81112af1e59c8c0979 to < 68d27250c9e81ab7764603e346c2b1017cb53adfaffected
  • 8a6e02d0c00e7b62e6acb74146878bb91e9e7e31 to < cfa7e2734877330d6c10e0f33953905486c4530caffected
  • 8a6e02d0c00e7b62e6acb74146878bb91e9e7e31 to < de8ccbd6bf4efe7a059e2c483789936009e10f42affected
  • 8a6e02d0c00e7b62e6acb74146878bb91e9e7e31 to < db3dbdfea1b8f38774419c5c2c14e4b81c48708daffected
  • 6.12.13 to < 6.12.103affected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.12.103 to ≤ 6.12.*unaffected
  • 6.18.44 to ≤ 6.18.*unaffected
  • 7.1.8 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References