CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of dynamically-placed reserved memory regions, where an out-of-bounds write can occur if the device tree defines more regions than the maximum allowed. This could lead to potential system instability or crashes during boot. Organizations using Linux in environments with extensive device tree configurations should prioritize addressing this issue to maintain system reliability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB when too many dynamic regions are defined On boot, fdt_scan_reserved_mem() saves each dynamically-placed /reserved-memory subnode into a local array of size MAX_RESERVED_REGIONS. If the device tree defines more than MAX_RESERVED_REGIONS dynamically-placed regions, fdt_scan_reserved_mem() writes past the end of the local array. Add a bounds check that logs an error and skips the excess regions, restoring the original behavior.