CVE-2026-80617
In the Linux kernel, the following vulnerability has been resolved:
net: airoha: fix foechecktime allocation size
foechecktime is declared as u16 pointer but was allocated with
only ppenumentries bytes instead of ppenumentries * sizeof(u16).
When airohappefoeverifyentry() is called with hash >= ppenumentries/2,
it writes beyond the allocated buffer, causing heap buffer overflow and
potential kernel crash.
Package Versions Affected
Automatically patch vulnerabilities without upgrading
CVSS Version



Related Resources
References
https://git.kernel.org/stable/c/112b5eff24e044561ee9599a0d34e0fcea1df4e0, https://git.kernel.org/stable/c/5c121ee635680c93d7074becf14cfbaac140f80d, https://git.kernel.org/stable/c/9f7cd1e26d2f1766438edc9b9254f2c618f9ae98, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80617.json, https://nvd.nist.gov/vuln/detail/CVE-2026-80617, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git