Improper Check or Handling of Exceptional Conditions in Linux kernel - CVE-2026-80665

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU146141

Improper Check or Handling of Exceptional Conditions in Linux kernel - CVE-2026-80665

Published: August 28, 2026


Vulnerability identifier: #VU146141
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-80665
CWE-ID: CWE-703
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper exception handling in KVM arm64 nested virtualization VNCR translation handling when processing VNCR aborts after kvm_translate_vncr() fails to resolve a PFN. A local user can trigger a translation failure involving a GFN outside of the memslots to cause a denial of service.

The issue occurs because late failures may be returned without the expected abort state being prepared for fault injection.


Affected software

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-realtime (Ubuntu package)
linux-oracle (Ubuntu package)
linux-gcp (Ubuntu package)
linux-aws (Ubuntu package)
linux-raspi (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-ibm (Ubuntu package)
linux-nvidia-bos (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-gcp-7.0 (Ubuntu package)
linux-oracle-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)
linux-gke (Ubuntu package)
linux-aws-7.0 (Ubuntu package)
linux-nvidia-7.0 (Ubuntu package)
linux-azure-7.0 (Ubuntu package)
linux-azure (Ubuntu package)

How to mitigate CVE-2026-80665

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - update to 7.0.0-34.34
linux-realtime (Ubuntu package) - update to 7.0.0-34.34.1
linux-oracle (Ubuntu package) - update to 7.0.0-1012.12
linux-gcp (Ubuntu package) - update to 7.0.0-1013.13
linux-aws (Ubuntu package) - update to 7.0.0-1013.13
linux-raspi (Ubuntu package) - update to 7.0.0-1020.20
linux-nvidia (Ubuntu package) - update to 7.0.0-1025.26
linux-ibm (Ubuntu package) - update to 7.0.0-1014.14
linux-nvidia-bos (Ubuntu package) - update to 7.0.0-2022.23
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-34.34~24.04.1
linux-gcp-7.0 (Ubuntu package) - update to 7.0.0-1013.13~24.04.1
linux-oracle-7.0 (Ubuntu package) - update to 7.0.0-1012.12~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1014.14
linux-gke (Ubuntu package) - update to 7.0.0-1007.8
linux-aws-7.0 (Ubuntu package) - update to 7.0.0-1013.13~24.04.1
linux-nvidia-7.0 (Ubuntu package) - update to 7.0.0-1024.25~24.04.1
linux-azure-7.0 (Ubuntu package) - addressed in versions 7.0.0-1016.16~24.04.1, 7.0.0-1017.17~24.04.1
linux-azure (Ubuntu package) - addressed in versions 7.0.0-1016.16, 7.0.0-1017.17

External References

Related Security Bulletins