CVE-2026-80546

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The xcrb msg to type6cprb msgx() function lacks proper input validation. This leads to several issues: signed integer variables may overflow during 4-byte boundary alignment, resulting in undersized buffer allocations or incorrect bounds checking; the CPRBX structure is copied from userspace without verifying the minimum buffer length, which can cause uninitialized memory access when reading fields such as cprb len and domain; and arithmetic overflows during the summation of control block and data block sizes may bypass size checks, potentially enabling buffer overflows.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.