{"id":"CVE-2026-80732","summary":"ata: pata_sl82c105: fix bridge revision use-after-free","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nata: pata_sl82c105: fix bridge revision use-after-free\n\npci_get_slot() returns a referenced PCI device. Commit 44c10138fd4b\n(\"PCI: Change all drivers to use pci_device-\u003erevision\") replaced a\nconfiguration-space read with direct access to the cached revision field,\nbut left that access after pci_dev_put(). The bridge may therefore be freed\nbefore its revision is read.\n\nRead the revision before dropping the reference.","modified":"2026-09-05T03:48:34.817987367Z","published":"2026-09-03T08:21:49.526Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80732.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1268ca9418e2217f2b60705cf4a280b689b26678"},{"type":"WEB","url":"https://git.kernel.org/stable/c/56fd78c8c820f527f8003e379ab71004b2e79a44"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5ef87b1b4656d675440ceab32a56e69ad958d3a1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7700a31039cdc6715cb6cce7e7a664ee4e945f67"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a626dfca96041842053cf2d1efceb436c4cd8dcf"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a837deeaa37cc3f0e8c4e5c096787047f272c956"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dc711fb137b33c12e6ca22b6a9c9b9f21d49e4de"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fa0dca89b4fb0909ffda7b9ab6051af33270f95e"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80732.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80732"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"44c10138fd4bbc4b6d6bff0873c24902f2a9da65"},{"fixed":"1268ca9418e2217f2b60705cf4a280b689b26678"},{"fixed":"a626dfca96041842053cf2d1efceb436c4cd8dcf"},{"fixed":"5ef87b1b4656d675440ceab32a56e69ad958d3a1"},{"fixed":"fa0dca89b4fb0909ffda7b9ab6051af33270f95e"},{"fixed":"dc711fb137b33c12e6ca22b6a9c9b9f21d49e4de"},{"fixed":"a837deeaa37cc3f0e8c4e5c096787047f272c956"},{"fixed":"56fd78c8c820f527f8003e379ab71004b2e79a44"},{"fixed":"7700a31039cdc6715cb6cce7e7a664ee4e945f67"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80732.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.23"},{"fixed":"5.10.265"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.216"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.183"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.152"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.104"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.45"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.9"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80732.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}