CVE-2026-80640
Description
In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix __fortify_panic Fix a runtime assertion in cxlctl_get_supported_features(). Fortify complains that it is potentially overflowing the entries array per __counted_by_le(num_entries). Quiet the false positive by initializing @num_entries earlier. memcpy: detected buffer overflow: 48 byte write of buffer size 0 WARNING: lib/string_helpers.c:1036 at __fortify_report+0x4d/0xa0, CPU#7: fwctl/1398 RIP: 0010:__fortify_report+0x50/0xa0 Call Trace: __fortify_panic+0xd/0xf cxlctl_get_supported_features.cold+0x23/0x35 [cxl_core]
How to fix
- Linux Linuxb8d15e85596ad8993d42e0703a9741961a2f03eb, 18c67ecc5dafe14055edcea53f36f4e31df1816b, 6c9d2e87df40d606f1c85143e9acb1ecff463d5e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4d1c09cef2c244bd19467c016a3e56ba28ecc59d ≤ v < b8d15e85596ad8993d42e0703a9741961a2f03eb, 4d1c09cef2c244bd19467c016a3e56ba28ecc59d ≤ v < 18c67ecc5dafe14055edcea53f36f4e31df1816b, 4d1c09cef2c244bd19467c016a3e56ba28ecc59d ≤ v < 6c9d2e87df40d606f1c85143e9acb1ecff463d5e, 6.15 | b8d15e85596ad8993d42e0703a9741961a2f03eb, 18c67ecc5dafe14055edcea53f36f4e31df1816b, 6c9d2e87df40d606f1c85143e9acb1ecff463d5e |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.