SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-80686

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-20

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel, specifically in the `migrate_vma_collect_pmd()` function, where the `pte_pfn()` and `pte_dirty()` functions can be called on non-present page table entries (PTEs). This can lead to system crashes or incorrect dirty folio accounting, potentially compromising system stability and performance. Organizations running Linux systems, particularly those utilizing device-private memory, should prioritize addressing this issue to mitigate the risk of operational disruptions.

CVE
CVE-2026-80686
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE pte_pfn() and pte_dirty() have undefined behaviour when called on a non-present PTE. In migrate_vma_collect_pmd(), these functions may be invoked on non-present entries (e.g., device-private entries), leading to potential crashes from pte_pfn() or incorrect dirty folio accounting from pte_dirty(). Fix both by guarding with pte_present() checks.