SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-80958

HIGH · CVSS 7.1 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel's dm-pcache component allows the tail-kset read in the cache_replay(), writeback worker, and GC worker functions to exceed the bounds of the segment data region, potentially leading to unauthorized access to adjacent control areas. This could result in data corruption or system instability. Linux system administrators and developers utilizing dm-pcache should prioritize addressing this issue to mitigate potential risks.

CVE
CVE-2026-80958
Severity
HIGH
CVSS
7.1
EPSS
0.12%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cache_replay(), the writeback worker and the GC worker bounds its length by PCACHE_SEG_SIZE - seg_off, the raw segment size rather than the data region. A tail near the segment end reads past the segment data into the following control area. Clamp the read to cache_seg_remain(), the data region.