VDB
CVE-2026-80958
CVE-2026-80958
PUBLISHED
CVSS 7.1 HIGH
Reported by Linux · Published September 11, 2026
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cache_replay(), the writeback worker and the GC worker bounds its length by PCACHE_SEG_SIZE - seg_off, the raw segment size rather than the data region. A tail near the segment end reads past the segment data into the following control area. Clamp the read to cache_seg_remain(), the data region.
EPSS 0.12% · 2.4th percentile
Risk Scores
CVSS 3.1
7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS Score
0.12%
2.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 |
| Linux | Linux | 6.18, 0, 6.18.50 |
| Linux | Linux | 7.3-rc1, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 |
| linux | linux_kernel | 6.18, 6.18, 6.18 |
Timeline
- Sep 11, 2026 CVE Published
- Sep 12, 2026 EPSS Score
- Sep 12, 2026 Coalition ESS Score
- Sep 13, 2026 EPSS Score
- Sep 13, 2026 CVE Updated