CVE-2026-80686

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE

pte_pfn() and pte_dirty() have undefined behaviour when called on a non-present PTE. In migrate_vma_collect_pmd(), these functions may be invoked on non-present entries (e.g., device-private entries), leading to potential crashes from pte_pfn() or incorrect dirty folio accounting from pte_dirty(). Fix both by guarding with pte_present() checks.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 6c287605fd56466e645693eff3ae7c08fba56e0a, < 26f9ca8ed42cba25d2c75daff13561cce6019395; >= 6c287605fd56466e645693eff3ae7c08fba56e0a, < 5b948706f11a950bc73c5304630d0a7eafc40daf; >= 6c287605fd56466e645693eff3ae7c08fba56e0a, < 86d55447de3738620b9a8272ff167ce97e7f7203; >= 6c287605fd56466e645693eff3ae7c08fba56e0a, < 2be94d6b20789b8865b1864dae5fe458ca85e019; >= 6c287605fd56466e645693eff3ae7c08fba56e0a, < 42f30fa5481a1f90571ccdfbb20d2e25e47ae76e; >= 6c287605fd56466e645693eff3ae7c08fba56e0a, < 63867c82d0c0c2d182016a32b1cc0103116b0ea5
LinuxLinux5.19

References

Timeline

Published
Aug 28, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-80687In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdevice_size error path CVE-2026-80688In the Linux kernel, the following vulnerability has been resolved: riscv: drop __init from vec_check_unaligned_access_speed_all_cpus ThisCVE-2026-80689In the Linux kernel, the following vulnerability has been resolved: tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functCVE-2026-80697.8PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named PipeCVE-2026-80690In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Initialize hba->rpmbs list in ufshcd Initialize the hCVE-2026-806917.5In the Linux kernel, the following vulnerability has been resolved: scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE CVE-2026-806928.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks CVE-2026-806939.3In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to the allocated array idpfCVE-2026-806949.8In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_contrCVE-2026-80695In the Linux kernel, the following vulnerability has been resolved: hwmon: (sht3x) Fix unaligned accesses Sashiko reports: In sht3x_updatCVE-2026-806967.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Fix reading the minimum alarm voltage Coverity reportCVE-2026-80697In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid f_path for page cache sharing Previously, backing
CVE-2026-80686: Unscored | Vulnix