Bug 2525497 (CVE-2026-80639) - CVE-2026-80639 kernel: cxl/test: Fix __fortify_panic
Summary: CVE-2026-80639 kernel: cxl/test: Fix __fortify_panic
Keywords:
Status: NEW
Alias: CVE-2026-80639
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-28 07:48 UTC by OSIDB Bzimport
Modified: 2026-08-31 09:43 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-28 07:48:03 UTC
In the Linux kernel, the following vulnerability has been resolved:

cxl/test: Fix __fortify_panic

Fix a runtime assertion in setup_xor_mapping(). Fortify complains that it
is potentially overflowing the xormaps array per __counted_by(nr_maps).
Quiet the false positive by initializing @nr_maps earlier.

 memcpy: detected buffer overflow: 32 byte write of buffer size 0
 WARNING: lib/string_helpers.c:1036 at __fortify_report+0x4d/0xa0, CPU#8: modprobe/2728
 Call Trace:
  __fortify_panic+0xd/0xf
  setup_xor_mapping+0x6c/0xa0 [cxl_translate]

[ dj: Fixed up @nr_entries to @nr_maps in commit log. ]

Comment 1 Mauro Matteo Cascella 2026-08-31 09:32:15 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026082840-CVE-2026-80639-9559@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.