Main
Vulnerability Database
Exploits
ID:12989 - Exploit for Improper access control in Linux kernel - CVE-2026-80724
ID:12989 - Exploit for Improper access control in Linux kernel - CVE-2026-80724
Published: August 31, 2026
Vulnerability identifier: #VU146058
Vulnerability risk: Low
CVE-ID: CVE-2026-80724
CWE-ID: CWE-284
Exploitation vector: Local access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to modify host-written timekeeping data.
The vulnerability exists due to improper access control in vmclock_miscdev_mmap() when handling read-only mappings of the shared vmclock ABI page. A local user can map the page read-only and then change it to writable with mprotect() to modify host-written timekeeping data.
The corrupted data can include the sequence counter, UTC time, and TSC offset.
Remediation
Install security update from vendor's repository.