SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-80732

HIGH · CVSS 7.8 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A use-after-free vulnerability exists in the Linux kernel's ata subsystem, specifically in the pata_sl82c105 driver, where a PCI device's revision may be accessed after the device has been freed. This flaw could lead to undefined behavior or system crashes, potentially allowing an attacker to exploit the vulnerability for privilege escalation or denial of service. Organizations using affected Linux kernel versions should prioritize patching this issue to maintain system integrity and security.

CVE
CVE-2026-80732
Severity
HIGH
CVSS
7.8
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-free pci_get_slot() returns a referenced PCI device. Commit 44c10138fd4b ("PCI: Change all drivers to use pci_device->revision") replaced a configuration-space read with direct access to the cached revision field, but left that access after pci_dev_put(). The bridge may therefore be freed before its revision is read. Read the revision before dropping the reference.