CVE-2026-80959
High
Description
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the persisted tail-position offset cache_pos_decode() takes the persisted key_tail and dirty_tail seg_off from the cache device and addresses within the segment with it. A seg_off at or past the segment data_size, controllable by whoever supplies the device (CAP_SYS_ADMIN), reads past the segment data. Reject a decoded seg_off that is not below the segment data_size.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedSep 11, 2026
First seenSep 11, 2026
How to fix
Update
- Linux Linuxffd9a214a94f9928e54856f42b1cc3e33fb10e36, 8bf7a06ca3c1611809725f58cfd573f2ffbda75f, d1898576090a10d2ac2715218a652e78fb65a6b0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 ≤ v < ffd9a214a94f9928e54856f42b1cc3e33fb10e36, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 ≤ v < 8bf7a06ca3c1611809725f58cfd573f2ffbda75f, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 ≤ v < d1898576090a10d2ac2715218a652e78fb65a6b0, 6.18 | ffd9a214a94f9928e54856f42b1cc3e33fb10e36, 8bf7a06ca3c1611809725f58cfd573f2ffbda75f, d1898576090a10d2ac2715218a652e78fb65a6b0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.