CVE-2026-80640cxl/fwctl: Fix __fortify_panic
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix __fortify_panic Fix a runtime assertion in cxlctl_get_supported_features(). Fortify complains that it is potentially overflowing the entries array per __counted_by_le(num_entries). Quiet the false positive by initializing @num_entries earlier. memcpy: detected buffer overflow: 48 byte write of buffer size 0 WARNING: lib/string_helpers.c:1036 at __fortify_report+0x4d/0xa0, CPU#7: fwctl/1398 RIP: 0010:__fortify_report+0x50/0xa0 Call Trace: __fortify_panic+0xd/0xf cxlctl_get_supported_features.cold+0x23/0x35 [cxl_core]
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 28, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 4d1c09cef2c244bd19467c016a3e56ba28ecc59d before b8d15e85596ad8993d42e0703a9741961a2f03eb; from 4d1c09cef2c244bd19467c016a3e56ba28ecc59d before 18c67ecc5dafe14055edcea53f36f4e31df1816b; from 4d1c09cef2c244bd19467c016a3e56ba28ecc59d before 6c9d2e87df40d606f1c85143e9acb1ecff463d5e | CNA record |
References
- https://git.kernel.org/stable/c/b8d15e85596ad8993d42e0703a9741961a2f03eb
- https://git.kernel.org/stable/c/18c67ecc5dafe14055edcea53f36f4e31df1816b
- https://git.kernel.org/stable/c/6c9d2e87df40d606f1c85143e9acb1ecff463d5e
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.