CVE-2026-80959

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1

Description An issue exists in the dm-pcache module where the cache pos decode() function fails to properly validate the persisted key tail and dirty tail segment offsets (seg off) retrieved from the cache device. An attacker with CAP SYS ADMIN privileges can provide a device with a seg off that is at or beyond the segment data size, leading to an out-of-bounds read past the segment data.

Recommendations Update to version 7.2.6-1.1 or later.