Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-80958

dm-pcache: clamp the tail kset read to the segment data region

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cache_replay(), the writeback worker and the GC worker bounds its length by PCACHE_SEG_SIZE - seg_off, the raw segment size rather than the data region. A tail near the segment end reads past the segment data into the following control area. Clamp the read to cache_seg_remain(), the data region.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 to < 2cd9776fe3f2d88ec22c36d3c8ba09fbf9d5500caffected
  • 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 to < 1ab55354368d071ebaee4d8c82313955eab65a04affected
  • 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 to < becf07e2b0053027495ecd671b1f82fb2e615f68affected

Linux Linux

Default version status: affected

  • 6.18affected
  • 0 to < 6.18unaffected
  • 6.18.50 to ≤ 6.18.*unaffected
  • 7.2.4 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References