Description
In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB when too many dynamic regions are defined On boot, fdt_scan_reserved_mem() saves each dynamically-placed /reserved-memory subnode into a local array of size MAX_RESERVED_REGIONS. If the device tree defines more than MAX_RESERVED_REGIONS dynamically-placed regions, fdt_scan_reserved_mem() writes past the end of the local array. Add a bounds check that logs an error and skips the excess regions, restoring the original behavior.
EPSS 0.156%Risk 0
View source- Published
- 2026-08-28 08:16:58
- Affected versions
- unknown
- Type
- Kernel
- Last modified
- 2026-08-28 08:16:58
- Vector
- Pending