CVE-2026-80724

Katalog CVE

CVSS 8.8 · High EPSS 0,18%

Skor CVSS 3.1 8.8 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclock_miscdev_mmap() rejects writable mappings of the shared vmclock ABI page with -EROFS, but leaves VM_MAYWRITE set. Userspace can map the page read-only and then upgrade it to writable with mprotect(), after which the guest can corrupt the host-written timekeeping data (sequence counter, UTC time, TSC offset) that the vmclock ABI defines as read-only. Clear VM_MAYWRITE on the read-only path so the mapping cannot be upgraded, as i915 does for its read-only objects and as fixed in drm/vc4 (CVE-2026-68445) and drm/panthor (CVE-2024-53071).

Rincian

Terbit di NVD

28 Agustus 2026

Terakhir diubah

7 September 2026

Status NVD

Received

CVSS 3.1

8.8 (High), sumber CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 6,6% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/0ce59c4148ecd1520c5592a63bb3c8991ee2d326
• https://git.kernel.org/stable/c/2496e141827102d6af512950057d402a2cfb2bfc
• https://git.kernel.org/stable/c/2e596e7814ba38cdc129991058b6c254ed37cb11
• https://git.kernel.org/stable/c/3f5677d2f817355147337f0453174c7bb0f3b66a
• https://git.kernel.org/stable/c/5b4f2bec7bea6c04084d720d731bedee7caf878d
• https://git.kernel.org/stable/c/a5edadbae57e2298a56cf7a4e774a027905a331f