PT-2026-90089
CVE-2026-80959
·
تاريخ النشر
2026-09-11
·
تاريخ التحديث
2026-09-17
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 7.2.6-1.1
Description
An issue exists in the
dm-pcache module where the cache pos decode() function fails to properly validate the persisted key tail and dirty tail segment offsets (seg off) retrieved from the cache device. An attacker with CAP SYS ADMIN privileges can provide a device with a seg off that is at or beyond the segment data size, leading to an out-of-bounds read past the segment data.Recommendations
Update to version 7.2.6-1.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾