CVE-2026-80723
High
Description
In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB when too many dynamic regions are defined On boot, fdt_scan_reserved_mem() saves each dynamically-placed /reserved-memory subnode into a local array of size MAX_RESERVED_REGIONS. If the device tree defines more than MAX_RESERVED_REGIONS dynamically-placed regions, fdt_scan_reserved_mem() writes past the end of the local array. Add a bounds check that logs an error and skips the excess regions, restoring the original behavior.
SeverityHigh
CVSS8.4
Exploit probability—
Product
Linux
PublishedAug 28, 2026
First seenAug 28, 2026
How to fix
Update
- Linux Linux68d27250c9e81ab7764603e346c2b1017cb53adf, cfa7e2734877330d6c10e0f33953905486c4530c, de8ccbd6bf4efe7a059e2c483789936009e10f42, db3dbdfea1b8f38774419c5c2c14e4b81c48708d, 6.12.103 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 9a0fe62f93ede02c27aaca81112af1e59c8c0979 ≤ v < 68d27250c9e81ab7764603e346c2b1017cb53adf, 8a6e02d0c00e7b62e6acb74146878bb91e9e7e31 ≤ v < cfa7e2734877330d6c10e0f33953905486c4530c, 8a6e02d0c00e7b62e6acb74146878bb91e9e7e31 ≤ v < de8ccbd6bf4efe7a059e2c483789936009e10f42, 8a6e02d0c00e7b62e6acb74146878bb91e9e7e31 ≤ v < db3dbdfea1b8f38774419c5c2c14e4b81c48708d, 6.12.13 ≤ v < 6.12.103, 6.13 | 68d27250c9e81ab7764603e346c2b1017cb53adf, cfa7e2734877330d6c10e0f33953905486c4530c, de8ccbd6bf4efe7a059e2c483789936009e10f42, db3dbdfea1b8f38774419c5c2c14e4b81c48708d, 6.12.103 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.