15 matches found
CVE-2026-80723
A flaw was found in the of: reservedmem component of the Linux kernel. When the device tree defines more dynamic regions than the MAXRESERVEDREGIONS array can hold, the fdtscanreservedmem function performs an out-of-bounds write. This vulnerability can lead to memory corruption, potentially...
Linux Distros Unpatched Vulnerability : CVE-2026-80723
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a...
UBUNTU-CVE-2026-80723
In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...
CVE-2026-80723 of: reserved_mem: prevent OOB when too many dynamic regions are defined
In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...
CVE-2026-80723
CVE-2026-80723 affects the Linux kernel in the of: reserved_mem subsystem. During boot, the function fdt_scan_reserved_mem() stores each dynamically-placed /reserved-memory subnode into a local array of fixed size MAX_RESERVED_REGIONS. When the device tree defines more dynamically-placed regions ...
CVE-2026-80723 of: reserved_mem: prevent OOB when too many dynamic regions are defined
In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...
CVE-2026-80723
In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...
EUVD-2026-67458
In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...
Linux Distros Unpatched Vulnerability : CVE-2026-74352
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of: reservedmem: avoid post-init UAF when allocreservedmemarray fails The global pointer 'reservedmem' continues to reference the reservedmemarray which lives i...
UBUNTU-CVE-2026-74352
In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: avoid post-init UAF when allocreservedmemarray fails The global pointer 'reservedmem' continues to reference the reservedmemarray which lives in initdata if allocreservedmemarray fails. ofreservedmemlookup is...
EUVD-2026-59499
In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: avoid post-init UAF when allocreservedmemarray fails The global pointer 'reservedmem' continues to reference the reservedmemarray which lives in initdata if allocreservedmemarray fails. ofreservedmemlookup is...
CVE-2026-74352 of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails
In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: avoid post-init UAF when allocreservedmemarray fails The global pointer 'reservedmem' continues to reference the reservedmemarray which lives in initdata if allocreservedmemarray fails. ofreservedmemlookup is...
CVE-2026-74352 of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails
In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: avoid post-init UAF when allocreservedmemarray fails The global pointer 'reservedmem' continues to reference the reservedmemarray which lives in initdata if allocreservedmemarray fails. ofreservedmemlookup is...
CVE-2026-74352
In the Linux kernel vulnerability CVE-2026-74352, the issue arises when alloc_reserved_mem_array() fails, causing reserved_mem to continue pointing to reserved_mem_array in __initdata. This could enable a post-init use-after-free via of_reserved_mem_lookup() which is exported for post-init use. T...
GSD-2023-1002353 of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem
of: reservedmem: Have kmemleak ignore dynamically allocated reserved mem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.95 by commit...