{"id":"CVE-2026-80959","summary":"dm-pcache: bound the persisted tail-position offset","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndm-pcache: bound the persisted tail-position offset\n\ncache_pos_decode() takes the persisted key_tail and dirty_tail seg_off from\nthe cache device and addresses within the segment with it. A seg_off at or\npast the segment data_size, controllable by whoever supplies the device\n(CAP_SYS_ADMIN), reads past the segment data.\n\nReject a decoded seg_off that is not below the segment data_size.","modified":"2026-09-15T03:31:04.495301076Z","published":"2026-09-11T19:42:26.514Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80959.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/8bf7a06ca3c1611809725f58cfd573f2ffbda75f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d1898576090a10d2ac2715218a652e78fb65a6b0"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ffd9a214a94f9928e54856f42b1cc3e33fb10e36"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80959.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80959"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"1d57628ff95b32d5cfa8d8f50e07690c161e9cf0"},{"fixed":"ffd9a214a94f9928e54856f42b1cc3e33fb10e36"},{"fixed":"8bf7a06ca3c1611809725f58cfd573f2ffbda75f"},{"fixed":"d1898576090a10d2ac2715218a652e78fb65a6b0"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80959.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.18.0"},{"fixed":"6.18.50"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80959.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}