VDB
CVE-2026-80959
CVE-2026-80959
PUBLISHED
CVSS 7.8 HIGH
Reported by Linux · Published September 11, 2026
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the persisted tail-position offset cache_pos_decode() takes the persisted key_tail and dirty_tail seg_off from the cache device and addresses within the segment with it. A seg_off at or past the segment data_size, controllable by whoever supplies the device (CAP_SYS_ADMIN), reads past the segment data. Reject a decoded seg_off that is not below the segment data_size.
EPSS 0.13% · 2.7th percentile
Risk Scores
CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.13%
2.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 |
| Linux | Linux | 6.18, 0, 6.18.50 |
| Linux | Linux | 7.3-rc1, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 |
| linux | linux_kernel | 6.18, 6.18, 6.18 |
Timeline
- Sep 11, 2026 CVE Published
- Sep 12, 2026 EPSS Score
- Sep 12, 2026 Coalition ESS Score
- Sep 13, 2026 EPSS Score
- Sep 13, 2026 CVE Updated