CVE-2026-80662

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the CXL RAS Capability Structure where CXL HEADERLOG SIZE was incorrectly defined as 512 bytes instead of the actual 64 bytes. This discrepancy leads to two primary issues: the header log copy() function overruns the 88-byte RAS capability iomap by 448 bytes, and the cxl aer uncorrectable error trace event performs a memcpy() that reads 448 bytes of kernel stack memory into the trace event ring buffer. This allows userspace to potentially read sensitive kernel stack data via tracefs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.