SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80685

HIGH · CVSS 7.1 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's memory management, specifically in the `snapshot_page()` function, which improperly accesses `__page_2` for order-1 folios when it should only do so for order-2 folios. This can lead to faults during memory operations, particularly in large-scale environments like a 22 TB ppc64le LPAR, where it may cause system instability or crashes. Organizations running Linux on high-memory configurations should prioritize addressing this issue to maintain system reliability and prevent potential downtime.

CVE
CVE-2026-80685
Severity
HIGH
CVSS
7.1
EPSS
0.12%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read __page_2 for order-1 folios in snapshot_page() snapshot_page() currently reads __page_2 after checking nr_pages > 1, but it should only do so when nr_pages > 2. If an order-1 folio is allocated at the end of a vmemmap section, __page_2 will not exist and reading it will cause a fault. During DLPAR memory remove on a 22 TB ppc64le LPAR, snapshot_page() oopsed on the page isolation path while reading an order-1 folio's __page_2 from an adjacent absent section (unmapped vmemmap). Fix this to avoid reading memmap that doesn't exist (e.g., a vmemmap hole).