CVE-2026-80639: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix __fortify_panic Fix a runtime assertion in setup_xor_mapping(). Fortify complains that it is potentially overflowing the xormaps array per __counted_by(nr_maps). Quiet the false positive by initializing @nr_maps earlier. memcpy: detected buffer overflow: 32 byte write of buffer size 0 WARNING: lib/string_helpers.c:1036 at __fortify_report+0x4d/0xa0, CPU#8: modprobe/2728 Call Trace: __fortify_panic+0xd/0xf setup_xor_mapping+0x6c/0xa0 [cxl_translate] [ dj: Fixed up @nr_entries to @nr_maps in commit log. ]

Засегнати продукти

• Linux Linux: 06377c54a133621d61fa76cdcea85077c5b958f4 преди 8c4f27a7f364eab514d2fa55c11f39d505122f1b; 06377c54a133621d61fa76cdcea85077c5b958f4 преди 08326b92c7a414a73b5b308d1daf0e91e0134dfc
• Linux Linux: 6.19; преди 6.19; 7.1.5 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-80639
• https://nvd.nist.gov/vuln/detail/CVE-2026-80639
• https://git.kernel.org/stable/c/8c4f27a7f364eab514d2fa55c11f39d505122f1b
• https://git.kernel.org/stable/c/08326b92c7a414a73b5b308d1daf0e91e0134dfc