CVE-2026-80958

In the Linux kernel, the following vulnerability has been resolved:

dm-pcache: clamp the tail kset read to the segment data region

The tail-kset read in cache replay(), the writeback worker and the GC worker bounds its length by PCACHE SEG SIZE - seg off, the raw segment size rather than the data region. A tail near the segment end reads past the segment data into the following control area.

Clamp the read to cache seg remain(), the data region.