CVE-2026-80874
Received Received - Intake

Memory Corruption in Renesas Ironhide Linux Kernel

Vulnerability report for CVE-2026-80874, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: renesas: ironhide: Describe inline ECC carveouts The DBSC5 DRAM controller protects DRAM content using inline ECC. The inline ECC utilizes areas of DRAM for its operation, which are in the DRAM address range, but must not be accessed or modified. Describe the inline ECC carveout areas used by the DBSC5 controller on this hardware as reserved-memory, which must not be accessed. Include DRAM areas which are unprotected by ECC as well, those are parts of the DRAM which directly precede the ECC carveout. In case of high DRAM utilization, unless the inline ECC carveouts are properly reserved, Linux may use and corrupt the memory used by the DBSC5 DRAM controller for inline ECC, which would lead to the system becoming unstable.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-05
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves the Linux kernel failing to properly reserve memory regions used by the DBSC5 DRAM controller for inline ECC protection. The DBSC5 controller relies on specific DRAM areas for error correction, which must not be accessed or modified. If these areas are not reserved and high DRAM usage occurs, the system may corrupt the ECC memory, leading to instability.

Detection Guidance

This vulnerability is specific to Renesas hardware using the DBSC5 DRAM controller with inline ECC. Detection requires checking if the inline ECC carveout areas are properly reserved in the device tree. Review the device tree source (DTS) files for the ironhide board to verify reserved-memory entries for ECC carveouts.

Impact Analysis

If exploited, this vulnerability could cause system instability due to memory corruption in the DBSC5 DRAM controller's ECC regions. This may result in crashes, data corruption, or unpredictable behavior during high memory usage scenarios.

Mitigation Strategies

Apply the latest kernel patches or firmware updates from Renesas that include the corrected device tree for the ironhide board. Ensure the inline ECC carveout areas are properly defined as reserved-memory in the device tree to prevent Linux from accessing these critical DRAM regions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80874. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart