CVE-2026-80732
Received Received - Intake

ata: pata_sl82c105 Use-After-Free in Linux Kernel

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-free pci_get_slot() returns a referenced PCI device. Commit 44c10138fd4b ("PCI: Change all drivers to use pci_device->revision") replaced a configuration-space read with direct access to the cached revision field, but left that access after pci_dev_put(). The bridge may therefore be freed before its revision is read. Read the revision before dropping the reference.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-03
AI Q&A
2026-09-03
EPSS Evaluated
N/A
NVD
CVE-2026-80732
EUVD
EUVD-2026-70336

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a use-after-free issue in the Linux kernel's pata_sl82c105 ATA driver. It occurs when pci_get_slot() returns a referenced PCI device, but the code reads the device's revision field after releasing the reference with pci_dev_put(). This can lead to accessing freed memory if the bridge device is freed before the revision is read.

Detection Guidance

This vulnerability is specific to the Linux kernel's pata_sl82c105 driver and involves a use-after-free issue related to PCI device revision access. Detection requires checking kernel logs for related errors or examining the driver code for the described issue.

Impact Analysis

This vulnerability could cause system instability, crashes, or potential privilege escalation if exploited. It may lead to memory corruption, kernel panics, or unexpected behavior in systems using the affected ATA driver.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. Monitor kernel logs for ata or pci-related errors. If using a vulnerable kernel version, avoid using the pata_sl82c105 driver until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80732. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart