CVE-2026-80958

High

Description

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cache_replay(), the writeback worker and the GC worker bounds its length by PCACHE_SEG_SIZE - seg_off, the raw segment size rather than the data region. A tail near the segment end reads past the segment data into the following control area. Clamp the read to cache_seg_remain(), the data region.

SeverityHigh
CVSS7.1
Exploit probability—
ProductLinux
PublishedSep 11, 2026
First seenSep 11, 2026

How to fix

Update
  • Linux Linux2cd9776fe3f2d88ec22c36d3c8ba09fbf9d5500c, 1ab55354368d071ebaee4d8c82313955eab65a04, becf07e2b0053027495ecd671b1f82fb2e615f68 or later

Affected products

ProductAffected versionsFixed in
Linux Linux1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 ≤ v < 2cd9776fe3f2d88ec22c36d3c8ba09fbf9d5500c, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 ≤ v < 1ab55354368d071ebaee4d8c82313955eab65a04, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 ≤ v < becf07e2b0053027495ecd671b1f82fb2e615f68, 6.182cd9776fe3f2d88ec22c36d3c8ba09fbf9d5500c, 1ab55354368d071ebaee4d8c82313955eab65a04, becf07e2b0053027495ecd671b1f82fb2e615f68

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.