CVE-2026-80686
Received Received - Intake

Memory Corruption Fix in Linux Kernel mm Subsystem

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE pte_pfn() and pte_dirty() have undefined behaviour when called on a non-present PTE. In migrate_vma_collect_pmd(), these functions may be invoked on non-present entries (e.g., device-private entries), leading to potential crashes from pte_pfn() or incorrect dirty folio accounting from pte_dirty(). Fix both by guarding with pte_present() checks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-09-18
AI Q&A
2026-08-28
EPSS Evaluated
2026-09-15
NVD
CVE-2026-80686
EUVD
EUVD-2026-67562

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves incorrect handling of non-present page table entries during memory migration. The functions pte_pfn() and pte_dirty() are called on entries that may not be present, leading to undefined behavior such as crashes or incorrect dirty folio accounting.

Detection Guidance

This vulnerability is specific to the Linux kernel and requires kernel-level detection. Check your kernel version with 'uname -r' and compare it against patched versions. Monitor kernel logs for crashes or errors related to memory migration or device handling.

Impact Analysis

This vulnerability could cause system crashes or data corruption when memory migration operations are performed on device-private entries. Users may experience instability or unexpected failures in systems running affected Linux kernel versions.

Compliance Impact

This vulnerability involves undefined behavior in the Linux kernel's memory management, specifically when handling non-present page table entries during device memory migration. It may lead to system crashes or incorrect memory state tracking, which could disrupt data integrity and availability.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix. If immediate patching is not possible, restrict access to device-private memory operations or disable non-critical device features until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80686. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart