CVE-2026-80693

A flaw was found in the Linux kernel's idpf component. A privileged control plane (such as a Physical Function or a hypervisor device model) could exploit a vulnerability by providing a malformed reply to an interrupt-vector allocation request. This malformed reply, where the sum of per-chunk vectors exceeds the allocated number, leads to an out-of-bounds write. This memory corruption could result in a denial of service.

This vulnerability is rated as Moderate severity because exploitation requires a compromised or hostile host hypervisor or physical function control plane communicating with an Intel Infrastructure Data Path Function (idpf) driver. In typical Red Hat Enterprise Linux deployments, this driver is loaded only when specialized Intel network virtual devices are attached. An attack from the control plane can trigger a kernel memory corruption, potentially leading to a guest system crash and denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.