CVE-2026-80663

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A local unprivileged user can exploit a symlink-based pidfile clobbering issue in the intel-speed-select daemon. Because the daemon uses a fixed pidfile path under /tmp, an attacker can pre-create a symbolic link at that location. This allows the daemon, which runs with root privileges, to write data into an arbitrary file chosen by the attacker. The issue is addressed by opening the pidfile with the O NOFOLLOW flag and validating it using the fstat() function before performing locking or writing operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.