CVE-2026-80880

Received Received - Intake

Memory Corruption in Linux Kernel IB/mlx5 Driver

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP rereg_mr Due to all the child mkeys in the implicit ODP configuration we cannot change anything in place for the parent mkey. Instead the whole thing needs to be rebuilt if any change is requested. If the user does not specify a translation then force the implicit values which will then fall through the logic into mlx5_ib_reg_user_mr() to allocate a completely new MR. Since implicit children were also touching the mr->pd, this removes another case where the access was racy.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-04

Last Modified

2026-09-04

Generated

2026-09-05

AI Q&A

2026-09-05

EPSS Evaluated

N/A

NVD

CVE-2026-80880

EUVD

EUVD-2026-71510

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper handling of implicit On-Demand Paging (ODP) memory registration in the Mellanox (mlx5) InfiniBand driver. The issue occurs when modifying memory keys (mkeys) in place for parent keys with child mkeys in implicit ODP mode. Instead of modifying in place, the entire structure must be rebuilt, which can lead to race conditions if not handled correctly.

Detection Guidance

This vulnerability is specific to the Linux kernel's IB/mlx5 driver and does not have direct network or system detection commands provided in the context. Detection would typically involve checking kernel logs for mlx5-related errors or monitoring for implicit ODP (On-Demand Paging) misconfigurations in Mellanox devices.

Impact Analysis

This vulnerability could lead to memory corruption or system instability if exploited, potentially causing crashes or unauthorized access. Systems using Mellanox InfiniBand hardware with the affected Linux kernel versions may experience performance issues or security breaches due to improper memory management.

Mitigation Strategies

Update the Linux kernel to a patched version that resolves this issue. Since the vulnerability is in the IB/mlx5 driver, ensure your Mellanox driver and firmware are also updated to versions compatible with the fixed kernel.

Hi! I’m here to help you understand CVE-2026-80880. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70