CVE-2026-80617

net: airoha: fix foe_check_time allocation size

State: Published
Severity: 9.8 Critical
Published: Aug 28, 2026
Updated: Aug 29, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: airoha: fix foe_check_time allocation size

foe_check_time is declared as u16 pointer but was allocated with only ppe_num_entries bytes instead of ppe_num_entries * sizeof(u16).

When airoha_ppe_foe_verify_entry() is called with hash >= ppe_num_entries/2, it writes beyond the allocated buffer, causing heap buffer overflow and potential kernel crash.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	56b99327a451917f1c17f85fc33ea8293c08a9ee to before 112b5eff24e044561ee9599a0d34e0fcea1df4e0Affected 6d5b601d52a27aafff555b480e538507901c672c to before 9f7cd1e26d2f1766438edc9b9254f2c618f9ae98Affected 6d5b601d52a27aafff555b480e538507901c672c to before 5c121ee635680c93d7074becf14cfbaac140f80dAffected 6.18.33 to before 6.18.40Affected
LinuxLinux	6.19Affected before 6.19Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.