CVE-2026-80741
High
Description
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message length drm_log_draw_kmsg_record() accesses s[len - 1] to strip the trailing newline, but len is unsigned int. If len is 0, the subtraction wraps to UINT_MAX, causing an out-of-bounds read. Add an early return when len is 0.
SeverityHigh
CVSS7.1
Exploit probability—
Product
Linux
PublishedSep 3, 2026
First seenSep 3, 2026
How to fix
Update
- Linux Linux16a2716910ecf7d31bf3c033ee7c506a0b00b2ee, 16bcea56f4205314ec2aa04a7ec74e5261d253c7, 60baa179ed1333535f6e2da4133511db55278ee4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 25e2c2a3eff55683bbe77b108db2a7e389246666 ≤ v < 16a2716910ecf7d31bf3c033ee7c506a0b00b2ee, 25e2c2a3eff55683bbe77b108db2a7e389246666 ≤ v < 16bcea56f4205314ec2aa04a7ec74e5261d253c7, 25e2c2a3eff55683bbe77b108db2a7e389246666 ≤ v < 60baa179ed1333535f6e2da4133511db55278ee4, 6.14 | 16a2716910ecf7d31bf3c033ee7c506a0b00b2ee, 16bcea56f4205314ec2aa04a7ec74e5261d253c7, 60baa179ed1333535f6e2da4133511db55278ee4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.