CVE-2026-80663
High
Description
In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with O_NOFOLLOW and validating it with fstat() before locking/writing. The daemon currently uses a fixed pidfile path under /tmp. A local unprivileged user can pre-create a symlink at that path and cause a root-run daemon instance to write into an attacker-chosen file.
SeverityHigh
CVSS7.1
Exploit probability—
Product
Linux
PublishedAug 28, 2026
First seenAug 28, 2026
How to fix
Update
- Linux Linux905493a6338c82a70da16f86e0a6215db5a3d73d, db938eb9a3c1317596c28e94413b33426508d51b, 72a07abc6b9046f07a08bba353cad7667bcc9dce, 19ffeb30fdfce63f8d6aca71bcdddb3f69d46278, e8adac69d1bdf035ef97cc914e845acd4ef08e28, 607af438e6430893a822964c841a1994b33acccc or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 7fd786dfbd2c55ddee3b87f33c82f1c58bdb1dd6 ≤ v < 905493a6338c82a70da16f86e0a6215db5a3d73d, 7fd786dfbd2c55ddee3b87f33c82f1c58bdb1dd6 ≤ v < db938eb9a3c1317596c28e94413b33426508d51b, 7fd786dfbd2c55ddee3b87f33c82f1c58bdb1dd6 ≤ v < 72a07abc6b9046f07a08bba353cad7667bcc9dce, 7fd786dfbd2c55ddee3b87f33c82f1c58bdb1dd6 ≤ v < 19ffeb30fdfce63f8d6aca71bcdddb3f69d46278, 7fd786dfbd2c55ddee3b87f33c82f1c58bdb1dd6 ≤ v < e8adac69d1bdf035ef97cc914e845acd4ef08e28, 7fd786dfbd2c55ddee3b87f33c82f1c58bdb1dd6 ≤ v < 607af438e6430893a822964c841a1994b33acccc, 5.18 | 905493a6338c82a70da16f86e0a6215db5a3d73d, db938eb9a3c1317596c28e94413b33426508d51b, 72a07abc6b9046f07a08bba353cad7667bcc9dce, 19ffeb30fdfce63f8d6aca71bcdddb3f69d46278, e8adac69d1bdf035ef97cc914e845acd4ef08e28, 607af438e6430893a822964c841a1994b33acccc |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.