CVE-2026-80582

Received Received - Intake

Linux Kernel PMD Mapping Boundary Check Vulnerability

Publication date: 2026-08-26

Last updated on: 2026-08-27

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/shmem_helper: Check VMA boundaries for PMD mappings In the ->huge_fault handler do not install a PMD huge page mapping if the huge page exceeds the boundaries of the VMA. All other ->huge_fault handlers have similar checks and the resulting mapping will trigger a VM_BUG_ON_VMA() if it ever reaches copy_pmd_range().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-26

Last Modified

2026-08-27

Generated

2026-09-16

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-14

NVD

CVE-2026-80582

EUVD

EUVD-2026-66497

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a flaw in the drm/shmem_helper component where the system fails to properly check VMA boundaries for PMD mappings during huge page fault handling. This could allow a huge page mapping to exceed VMA limits, potentially leading to memory corruption or system instability.

Detection Guidance

This vulnerability is specific to the Linux kernel's DRM subsystem and involves improper handling of PMD mappings in the huge_fault handler. Detection requires checking kernel logs for VM_BUG_ON_VMA() errors or examining kernel memory management behavior for boundary violations in VMA mappings.

Impact Analysis

This vulnerability could allow an attacker to cause memory corruption or trigger system crashes by exploiting the improper VMA boundary checks in huge page fault handling. This may lead to denial of service or privilege escalation on affected systems.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel memory management issue that could lead to memory corruption or crashes, but no evidence suggests it impacts data protection or privacy requirements.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this issue. Monitor kernel logs for VM_BUG_ON_VMA() errors indicating boundary violations. Ensure all systems running affected kernels are updated promptly.

Hi! I’m here to help you understand CVE-2026-80582. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70