CVE-2026-80874: arm64: dts: renesas: ironhide: Describe inline ECC carveouts
In the Linux kernel, the following vulnerability has been resolved:
arm64: dts: renesas: ironhide: Describe inline ECC carveouts
The DBSC5 DRAM controller protects DRAM content using inline ECC. The inline ECC utilizes areas of DRAM for its operation, which are in the DRAM address range, but must not be accessed or modified. Describe the inline ECC carveout areas used by the DBSC5 controller on this hardware as reserved-memory, which must not be accessed. Include DRAM areas which are unprotected by ECC as well, those are parts of the DRAM which directly precede the ECC carveout.
In case of high DRAM utilization, unless the inline ECC carveouts are properly reserved, Linux may use and corrupt the memory used by the DBSC5 DRAM controller for inline ECC, which would lead to the system becoming unstable.
Affected Software
Event History
Frequently Asked Questions
Which deployments are most exposed to this issue?
Systems using the Renesas Ironhide device tree with the DBSC5 DRAM controller and inline ECC are affected if the ECC carveout and preceding unprotected DRAM areas are not reserved. The risk is greatest under high DRAM utilization, when Linux may allocate these areas.
What is the impact if the affected memory regions are used by Linux?
Linux can access or modify DRAM used internally by the DBSC5 controller for inline ECC. This can corrupt ECC-related memory and make the system unstable.
What configuration change addresses the problem?
The DBSC5 inline ECC carveout areas, along with the directly preceding DRAM areas that are not ECC-protected, must be described as reserved-memory so Linux does not use them.