CVE-2026-80867
Description
In the Linux kernel, the following vulnerability has been resolved: alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Currently, Alpha's pci_mmap_resource() does not check security_locked_down(LOCKDOWN_PCI_ACCESS) before allowing userspace to mmap PCI BARs. The generic version has had this check since commit eb627e17727e ("PCI: Lock down BAR access when the kernel is locked down") to prevent DMA attacks when the kernel is locked down. Add the same check to Alpha's pci_mmap_resource().
How to fix
- Linux Linux6e368485a1ac19fbde0a8b6a332d4545ae72a8ac, ed2cd1fee0ed16a1c2dff49175e65c641eb8ae2b, c3234efe21d4198945492cf7dba6859476f0f6ff, 4de5ff924c0a8ef8166c1a68af9087826e1e8d61, 85f966b1120874fe530edec50d28373ceb06ebcd, 94defb18ac792fd16407d5a52ad0d3f5055c4b43, 257b55dc3d18d7ef01f62a8ff7317871f7597e28, 78a228f0aa0e9eba31955950c8a40a9945e2c8bb or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | eb627e17727ebeede70697ae1798688b0d328b54 ≤ v < 6e368485a1ac19fbde0a8b6a332d4545ae72a8ac, eb627e17727ebeede70697ae1798688b0d328b54 ≤ v < ed2cd1fee0ed16a1c2dff49175e65c641eb8ae2b, eb627e17727ebeede70697ae1798688b0d328b54 ≤ v < c3234efe21d4198945492cf7dba6859476f0f6ff, eb627e17727ebeede70697ae1798688b0d328b54 ≤ v < 4de5ff924c0a8ef8166c1a68af9087826e1e8d61, eb627e17727ebeede70697ae1798688b0d328b54 ≤ v < 85f966b1120874fe530edec50d28373ceb06ebcd, eb627e17727ebeede70697ae1798688b0d328b54 ≤ v < 94defb18ac792fd16407d5a52ad0d3f5055c4b43, eb627e17727ebeede70697ae1798688b0d328b54 ≤ v < 257b55dc3d18d7ef01f62a8ff7317871f7597e28, eb627e17727ebeede70697ae1798688b0d328b54 ≤ v < 78a228f0aa0e9eba31955950c8a40a9945e2c8bb, 5.4 | 6e368485a1ac19fbde0a8b6a332d4545ae72a8ac, ed2cd1fee0ed16a1c2dff49175e65c641eb8ae2b, c3234efe21d4198945492cf7dba6859476f0f6ff, 4de5ff924c0a8ef8166c1a68af9087826e1e8d61, 85f966b1120874fe530edec50d28373ceb06ebcd, 94defb18ac792fd16407d5a52ad0d3f5055c4b43, 257b55dc3d18d7ef01f62a8ff7317871f7597e28, 78a228f0aa0e9eba31955950c8a40a9945e2c8bb |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.