CVE-2026-80723
- Source
- https://cve.org/CVERecord?id=CVE-2026-80723
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80723.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-80723
- Downstream
- Published
- 2026-08-28T06:53:18Z
- Modified
- 2026-08-31T03:30:21Z
- Severity
-
- 8.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- of: reserved_mem: prevent OOB when too many dynamic regions are defined
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
of: reserved_mem: prevent OOB when too many dynamic regions are defined
On boot, fdt_scan_reserved_mem() saves each dynamically-placed /reserved-memory subnode into a local array of size MAX_RESERVED_REGIONS.
If the device tree defines more than MAX_RESERVED_REGIONS dynamically-placed regions, fdt_scan_reserved_mem() writes past the end of the local array.
Add a bounds check that logs an error and skips the excess regions, restoring the original behavior.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80723.json" }- References
-
- https://git.kernel.org/stable/c/68d27250c9e81ab7764603e346c2b1017cb53adf
- https://git.kernel.org/stable/c/cfa7e2734877330d6c10e0f33953905486c4530c
- https://git.kernel.org/stable/c/db3dbdfea1b8f38774419c5c2c14e4b81c48708d
- https://git.kernel.org/stable/c/de8ccbd6bf4efe7a059e2c483789936009e10f42
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80723.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-80723
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced9a0fe62f93ede02c27aaca81112af1e59c8c0979Fixed68d27250c9e81ab7764603e346c2b1017cb53adf
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced8a6e02d0c00e7b62e6acb74146878bb91e9e7e31Fixedcfa7e2734877330d6c10e0f33953905486c4530cFixedde8ccbd6bf4efe7a059e2c483789936009e10f42Fixeddb3dbdfea1b8f38774419c5c2c14e4b81c48708d
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.12.13Fixed6.12.103
Affected versions
v6.*
v6.12.100
v6.12.101
v6.12.102
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.30
v6.12.31
v6.12.32
v6.12.33
v6.12.34
v6.12.35
v6.12.36
v6.12.37
v6.12.38
v6.12.39
v6.12.40
v6.12.41
v6.12.42
v6.12.43
v6.12.44
v6.12.45
v6.12.46
v6.12.47
v6.12.48
v6.12.49
v6.12.50
v6.12.51
v6.12.52
v6.12.53
v6.12.54
v6.12.55
v6.12.56
v6.12.57
v6.12.58
v6.12.59
v6.12.60
v6.12.61
v6.12.62
v6.12.63
v6.12.64
v6.12.65
v6.12.66
v6.12.67
v6.12.68
v6.12.69
v6.12.70
v6.12.71
v6.12.72
v6.12.73
v6.12.74
v6.12.75
v6.12.76
v6.12.77
v6.12.78
v6.12.79
v6.12.80
v6.12.81
v6.12.82
v6.12.83
v6.12.84
v6.12.85
v6.12.86
v6.12.87
v6.12.88
v6.12.89
v6.12.90
v6.12.91
v6.12.92
v6.12.93
v6.12.94
v6.12.95
v6.12.96
v6.12.97
v6.12.98
v6.12.99