Out-of-bounds read in Linux kernel - CVE-2026-80961

Vulnerability details

The vulnerability allows a local privileged user to disclose sensitive information.

The vulnerability exists due to an out-of-bounds read in dm-pcache cache_key_decode() when decoding cache keys from supplied cache-device metadata. A local privileged user can provide key metadata whose intra-segment offset and length extend beyond the segment boundary to disclose sensitive information.

Affected software

How to mitigate CVE-2026-80961

External References

• https://git.kernel.org/stable/c/5ac38f4b4862fad6e7270fde5c3356a822ce74ca
• https://git.kernel.org/stable/c/d8caf96040a06096276ab72f5e1e8547c014c564
• https://git.kernel.org/stable/c/f11deb032fd84081e7831cffcba895d893054a22

Related Security Bulletins

• Out-of-bounds read in Linux kernel md dm-pcache driver