CVE-2026-80582

HighCVSS 7.8/10Last modified Aug 27, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/shmem_helper: Check VMA boundaries for PMD mappings

In the ->huge_fault handler do not install a PMD huge page mapping if the huge page exceeds the boundaries of the VMA.

All other ->huge_fault handlers have similar checks and the resulting mapping will trigger a VM_BUG_ON_VMA() if it ever reaches copy_pmd_range().

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= fc3bbf34e643faa8678aabdc3810c60109f3435a, < 12803e89a1e593fd1e784dfe7453f5e392ccaff2; >= fc3bbf34e643faa8678aabdc3810c60109f3435a, < 617bbd08714857c1613d7c550d43a9092ec0fb97
LinuxLinux7.0

References

Timeline

Published
Aug 26, 2026
Last modified
Aug 27, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-805837.8In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses The "DEC0 MODCVE-2026-805848.4In the Linux kernel, the following vulnerability has been resolved: s390/qeth: validate user buffer length in SNMP and ARP query ioctls qeCVE-2026-805859.4In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP FaCVE-2026-805869.8In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote pCVE-2026-805879.8In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions Some MPTCP suboptions CVE-2026-805887.5In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors After commitCVE-2026-805899.8In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk disk_rCVE-2026-80596.1IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerabilCVE-2026-805908.6In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtioCVE-2026-805917.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xCVE-2026-80592In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range parameters are invalidCVE-2026-805938.4In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check package count before accessing element atk
CVE-2026-80582: High severity, CVSS 7.8 | Vulnix