VDB
CVE-2026-80957
CVE-2026-80957
PUBLISHED
Reported by Linux · Published September 11, 2026
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cache_replay() follows the on-media last-kset chain by next_cache_seg_id with no cond_resched(). A forged chain that points back into a segment it has already visited makes the replay loop follow it forever. Cap the last-kset hops at cache->n_segs; a valid chain visits each segment at most once.
EPSS 0.17% · 6.3th percentile
Risk Scores
EPSS Score
0.17%
6.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 |
| Linux | Linux | 6.18, 0, 6.18.50 |
| Linux | Linux | 7.3-rc1, 0, 6.18.50 |
| linux | linux_kernel | 6.18, 6.18, 6.18 |
Timeline
- Sep 11, 2026 CVE Published
- Sep 11, 2026 CVE Updated
- Sep 12, 2026 EPSS Score
- Sep 12, 2026 Coalition ESS Score
- Sep 17, 2026 EPSS Score