CVE-2026-80685
- Source
- https://cve.org/CVERecord?id=CVE-2026-80685
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80685.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-80685
- Downstream
- Published
- 2026-08-28T06:52:51.305Z
- Modified
- 2026-08-31T03:30:29.434900650Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- mm/util: don't read __page_2 for order-1 folios in snapshot_page()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
mm/util: don't read __page2 for order-1 folios in snapshotpage()
snapshot_page() currently reads _page2 after checking nrpages > 1, but it should only do so when nrpages > 2.
If an order-1 folio is allocated at the end of a vmemmap section, _page2 will not exist and reading it will cause a fault.
During DLPAR memory remove on a 22 TB ppc64le LPAR, snapshot_page() oopsed on the page isolation path while reading an order-1 folio's _page2 from an adjacent absent section (unmapped vmemmap).
Fix this to avoid reading memmap that doesn't exist (e.g., a vmemmap hole).
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80685.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/7441d6348c70738e9ed307510db171c7a9b3f4bf
- https://git.kernel.org/stable/c/9668ffe0e2a5e2399dce281620198a2e415871fc
- https://git.kernel.org/stable/c/c649324571206a30949765320b91ccdb4c1722dc
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80685.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-80685
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git