Improper input validation in Linux kernel - CVE-2026-80592
Published: August 28, 2026
Vulnerability identifier: #VU146297
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-80592
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper input validation in samples/damon/mtier.c when handling sysfs writes that enable the mtier sample module with invalid address range parameters. A local user can write invalid address range values to trigger a kernel warning and cause a denial of service.
The issue can occur if node0 or node1 address parameters are not properly initialized, including cases where automatic node address detection is enabled and one of the nodes is memoryless.
Affected software
Linux kernel
How to mitigate CVE-2026-80592
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3