« Volver al listado

CVE-2026-80867

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

alpha/PCI: Add security_locked_down() check to pci_mmap_resource()

Currently, Alpha's pci_mmap_resource() does not check security_locked_down(LOCKDOWN_PCI_ACCESS) before allowing userspace to mmap PCI BARs.

The generic version has had this check since commit eb627e17727e ("PCI: Lock down BAR access when the kernel is locked down") to prevent DMA attacks when the kernel is locked down.

Add the same check to Alpha's pci_mmap_resource().

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-80867",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "eb627e17727ebeede70697ae1798688b0d328b54",
              "lessThan": "6e368485a1ac19fbde0a8b6a332d4545ae72a8ac",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "eb627e17727ebeede70697ae1798688b0d328b54",
              "lessThan": "ed2cd1fee0ed16a1c2dff49175e65c641eb8ae2b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "eb627e17727ebeede70697ae1798688b0d328b54",
              "lessThan": "c3234efe21d4198945492cf7dba6859476f0f6ff",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "eb627e17727ebeede70697ae1798688b0d328b54",
              "lessThan": "4de5ff924c0a8ef8166c1a68af9087826e1e8d61",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "eb627e17727ebeede70697ae1798688b0d328b54",
              "lessThan": "85f966b1120874fe530edec50d28373ceb06ebcd",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "eb627e17727ebeede70697ae1798688b0d328b54",
              "lessThan": "94defb18ac792fd16407d5a52ad0d3f5055c4b43",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "eb627e17727ebeede70697ae1798688b0d328b54",
              "lessThan": "257b55dc3d18d7ef01f62a8ff7317871f7597e28",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "eb627e17727ebeede70697ae1798688b0d328b54",
              "lessThan": "78a228f0aa0e9eba31955950c8a40a9945e2c8bb",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "arch/alpha/kernel/pci-sysfs.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.4"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.4",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.*"
            },
            {
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "arch/alpha/kernel/pci-sysfs.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-04T17:16:58.510",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/257b55dc3d18d7ef01f62a8ff7317871f7597e28",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/4de5ff924c0a8ef8166c1a68af9087826e1e8d61",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/6e368485a1ac19fbde0a8b6a332d4545ae72a8ac",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/78a228f0aa0e9eba31955950c8a40a9945e2c8bb",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/85f966b1120874fe530edec50d28373ceb06ebcd",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/94defb18ac792fd16407d5a52ad0d3f5055c4b43",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c3234efe21d4198945492cf7dba6859476f0f6ff",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ed2cd1fee0ed16a1c2dff49175e65c641eb8ae2b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nalpha/PCI: Add security_locked_down() check to pci_mmap_resource()\n\nCurrently, Alpha's pci_mmap_resource() does not check\nsecurity_locked_down(LOCKDOWN_PCI_ACCESS) before allowing userspace to mmap\nPCI BARs.\n\nThe generic version has had this check since commit eb627e17727e (\"PCI:\nLock down BAR access when the kernel is locked down\") to prevent DMA\nattacks when the kernel is locked down.\n\nAdd the same check to Alpha's pci_mmap_resource()."
    }
  ],
  "lastModified": "2026-09-04T17:16:58.510",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}