CVE-2026-80617
net: airoha: fix foe_check_time allocation size
CVSS Score
9.8
EPSS Score
0.2%
EPSS Percentile
8th
In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foe_check_time allocation size foe_check_time is declared as u16 pointer but was allocated with only ppe_num_entries bytes instead of ppe_num_entries * sizeof(u16). When airoha_ppe_foe_verify_entry() is called with hash >= ppe_num_entries/2, it writes beyond the allocated buffer, causing heap buffer overflow and potential kernel crash.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Aug 28, 2026 |
| Last Updated | Aug 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new critical vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Linux / Linux
56b99327a451917f1c17f85fc33ea8293c08a9ee < 112b5eff24e044561ee9599a0d34e0fcea1df4e0 6d5b601d52a27aafff555b480e538507901c672c < 9f7cd1e26d2f1766438edc9b9254f2c618f9ae98 6d5b601d52a27aafff555b480e538507901c672c < 5c121ee635680c93d7074becf14cfbaac140f80d 6.18.33 < 6.18.40
Linux / Linux
6.19