In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset… (CVE-2026-80958)
A vulnerability in the Linux kernel's dm-pcache component was resolved by clamping the tail kset read to the segment data region. The issue involved reading beyond the intended data region into a control area due to improper bounds checking in cache_replay() and related workers.
AI Analysis
Technical Summary
The Linux kernel's dm-pcache module had a vulnerability where the tail-kset read operation in cache_replay(), the writeback worker, and the garbage collection worker used the raw segment size (PCACHE_SEG_SIZE - seg_off) to bound its read length. This caused reads near the segment end to extend past the segment data region into the following control area. The fix clamps the read length to cache_seg_remain(), which correctly limits the read to the data region only.
Potential Impact
This vulnerability could lead to out-of-bounds reads beyond the segment data region into control data areas within the dm-pcache module. The impact details such as potential information disclosure or system stability effects are not explicitly described in the input data.
Mitigation Recommendations
A fix has been applied to clamp the tail kset read to the segment data region, resolving the vulnerability. No additional mitigation steps are indicated in the provided information.
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset… (CVE-2026-80958)
Description
A vulnerability in the Linux kernel's dm-pcache component was resolved by clamping the tail kset read to the segment data region. The issue involved reading beyond the intended data region into a control area due to improper bounds checking in cache_replay() and related workers.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's dm-pcache module had a vulnerability where the tail-kset read operation in cache_replay(), the writeback worker, and the garbage collection worker used the raw segment size (PCACHE_SEG_SIZE - seg_off) to bound its read length. This caused reads near the segment end to extend past the segment data region into the following control area. The fix clamps the read length to cache_seg_remain(), which correctly limits the read to the data region only.
Potential Impact
This vulnerability could lead to out-of-bounds reads beyond the segment data region into control data areas within the dm-pcache module. The impact details such as potential information disclosure or system stability effects are not explicitly described in the input data.
Mitigation Recommendations
A fix has been applied to clamp the tail kset read to the segment data region, resolving the vulnerability. No additional mitigation steps are indicated in the provided information.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-hh69-ghmv-95j7
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-80958"]
Threat ID: 6aa4a02e55bf5e2cf5a86b6d
Added to database: 09/12/2026, 00:43:26 UTC
Last enriched: 09/12/2026, 01:25:04 UTC
Last updated: 09/12/2026, 02:41:23 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.