CVE-2026-80962
kernel: dm-pcache: validate geometry fields from on-disk cache_info
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 11, 2026
Updated · September 29, 2026
Description
A flaw was found in the Linux kernel's dm-pcache component. A local attacker with administrative privileges (CAP_SYS_ADMIN) could manipulate on-disk cache metadata to provide invalid geometry fields. This manipulation could lead to an out-of-bounds read and write, potentially causing memory corruption and impacting system stability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-125 · Out-of-bounds Read