Beveiligingsadvies

CVE-2026-80617

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-28 06:48:37
Laatst bijgewerkt 2026-08-29 06:21:25
Toegewezen door Linux
CVSS-score 9.8
Status PUBLISHED

Beschrijving

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foe_check_time allocation size foe_check_time is declared as u16 pointer but was allocated with only ppe_num_entries bytes instead of ppe_num_entries * sizeof(u16). When airoha_ppe_foe_verify_entry() is called with hash >= ppe_num_entries/2, it writes beyond the allocated buffer, causing heap buffer overflow and potential kernel crash.