Out-of-Bounds Write in Linux Kernel Reserved Memory Handling

CVE-2026-80723

What is CVE-2026-80723?

The vulnerability in the Linux kernel pertains to a flaw in the handling of dynamically-placed reserved memory regions. During the boot process, the fdt_scan_reserved_mem() function attempts to save each reserved-memory subnode into a local array defined with a maximum size. If the device tree specifies more regions than this limit, the function can inadvertently write past the end of the array. To rectify this, a bounds check has been added, which logs an error when such an overflow occurs and prevents further processing of excess regions, thereby restoring normal operation. It is essential for users and administrators to apply the latest patches to mitigate potential security risks associated with this vulnerability.

References