CVE-2026-80960Medium· 5.5▾ SunlitA flaw was found in the Linux kernel's dm-pcache component. A local attacker with CAP_SYS_ADMIN capabilities can exploit this vulnerability by supplying a specially crafted cache device. The seg_num value, which dictates the size of cache …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
— → 5.7
none → medium
— → 5.7
none → medium
Last analysed / modified upstream
— → 5.5
none → medium
A flaw was found in the Linux kernel's dm-pcache component. A local attacker with CAP_SYS_ADMIN capabilities can exploit this vulnerability by supplying a specially crafted cache device. The seg_num value, which dictates the size of cache segments, is not adequately validated against the actual device size. This oversight can lead to an out-of-bounds write of 12 KiB into the kernel heap during table load, potentially resulting in a denial of service or other system compromise.
kernel: dm-pcache: validate on-media seg_num against the cache device size — rated Moderate by Red Hat. Released 2026-09-11, updated 2026-09-14.
Not affected:
Refer to the advisory for fix availability.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-80945Critical· 9.1In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before software fallback on decompress On a hardware analytics error, decompress retries through the software fallback, which writes req->dst w…
CVE-2026-89602High· 7.8In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing z_erofs_gbuf_nrpages is advanced only after every global buffer has been grown
CVE-2026-92382Medium· 4.1An out-of-bounds write flaw was found in usbredir
CVE-2026-91142Low· 3.6A flaw was found in Cockpit
CVE-2026-81627High· 8.2A flaw was found in QEMU
CVE-2026-89492Critical· 9.8In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2_validate_dx_leaf() and ocfs2_validate_dx_root() check the ECC and signature of an indexed-dire…