CVE-2026-80956

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1

Description An issue exists in the dm-pcache component where the get cache segment() function scans the segment map up to the physical device segment count, while cache segs init() only initializes segments up to cache info->n segs. A crafted image where cache info->n segs is smaller than the device count can result in zeroed pcache cache segment structures. This allows the allocator to provide a segment with a NULL segment.data pointer to the cache kset close() function, which then performs a write operation without a NULL check.

Recommendations Update to version 7.2.6-1.1.