Riskcovery

CVE-2026-80640

cxl/fwctl: Fix __fortify_panic

State
Published
Severity
Not scored
Published
Aug 28, 2026
Updated
Aug 28, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cxl/fwctl: Fix __fortify_panic

Fix a runtime assertion in cxlctl_get_supported_features(). Fortify complains that it is potentially overflowing the entries array per __counted_by_le(num_entries). Quiet the false positive by initializing @num_entries earlier.

memcpy: detected buffer overflow: 48 byte write of buffer size 0 WARNING: lib/string_helpers.c:1036 at __fortify_report+0x4d/0xa0, CPU#7: fwctl/1398 RIP: 0010:__fortify_report+0x50/0xa0 Call Trace: __fortify_panic+0xd/0xf cxlctl_get_supported_features.cold+0x23/0x35 [cxl_core]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4d1c09cef2c244bd19467c016a3e56ba28ecc59d to before b8d15e85596ad8993d42e0703a9741961a2f03ebAffected
  • 4d1c09cef2c244bd19467c016a3e56ba28ecc59d to before 18c67ecc5dafe14055edcea53f36f4e31df1816bAffected
  • 4d1c09cef2c244bd19467c016a3e56ba28ecc59d to before 6c9d2e87df40d606f1c85143e9acb1ecff463d5eAffected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.