In the Linux kernel, the following vulnerability has been resolved:
of: reserved_mem: prevent OOB when too many dynamic regions are defined
On boot, fdt_scan_reserved_mem() saves each dynamically-placed /reserved-memory subnode into a local array of size MAX_RESERVED_REGIONS.
If the device tree defines more than MAX_RESERVED_REGIONS dynamically-placed regions, fdt_scan_reserved_mem() writes past the end of the local array.
Add a bounds check that logs an error and skips the excess regions, restoring the original behavior.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.18-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12Upgrade kernel6.12-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-headersUpgrade kernel6.18-debuginfo-common-x86_64Upgrade perf6.18-debuginfoUpgrade kernel-livepatch-6.18.44-99.149Upgrade kernel6.12-modules-extraUpgrade microvm-kernel6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade bpftool6.12-debuginfoUpgrade perf6.12Upgrade kernel6.18-debuginfoUpgrade bpftool6.12Upgrade python3-perf6.18Upgrade kernel6.18-develUpgrade kernel6.18-modules-extra-commonUpgrade python3-perf6.12Upgrade perf6.18Upgrade kernel6.12-develUpgrade kernel6.12-tools-develUpgrade kernel-livepatch-6.12.103-127.188Upgrade bpftool6.18Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.18Upgrade kernel6.18-tools-develUpgrade kernel6.12-headersUpgrade kernel6.18-toolsUpgrade kernel6.18-modules-extraUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64 | Sep 30, 2026 | Aug 28, 2026 |
| Debian | — | Upgrade linux-6.12Upgrade linux | Aug 30, 2026 | Aug 30, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub