Skip to main content

Linux Kernel CVE-2026-80732

| EUVDEUVD-2026-70336 HIGH
2026-09-03 Linux GHSA-p564-mwrx-5m7j
Linux Suse
High
Disputed · 7.8 Vendor: Linux
Share

Severity by source

Sources disagree (Low–High)
Vendor (Linux) PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vuln.today AI
7.8 HIGH

Local low-privilege UAF in kernel driver; hardware prerequisite is a deployment filter, not an attack complexity factor once hardware is present.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
SUSE
2.0 LOW
AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: Linux

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

6
Metadata Corrected
Sep 04, 2026 - 05:40 vuln.today
tag: Information Disclosure removed
Analysis Generated
Sep 04, 2026 - 05:25 vuln.today
CVSS changed
Sep 04, 2026 - 05:22 NVD
7.8 (HIGH)
Patch available
Sep 03, 2026 - 10:16 EUVD
CVE Published
Sep 03, 2026 - 08:21 cve.org
UNKNOWN (no severity yet)
CVE Published
Sep 03, 2026 - 08:21 cve.org
HIGH 7.8

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

ata: pata_sl82c105: fix bridge revision use-after-free

pci_get_slot() returns a referenced PCI device. Commit 44c10138fd4b ("PCI: Change all drivers to use pci_device->revision") replaced a configuration-space read with direct access to the cached revision field, but left that access after pci_dev_put(). The bridge may therefore be freed before its revision is read.

Read the revision before dropping the reference.

AnalysisAI

Use-after-free in the Linux kernel's pata_sl82c105 PATA bridge driver allows a local low-privileged user to potentially achieve kernel memory corruption leading to privilege escalation on systems equipped with the SL82C105 PCI bridge chip. The defect was introduced by commit 44c10138fd4b, which replaced a PCI configuration-space read with direct access to the cached revision field of a PCI device struct - but left that access after the reference was dropped via pci_dev_put(), creating a window where the bridge struct may be freed before the read occurs. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Recon
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Install
technique details hidden
C2
technique details hidden
Execute
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires all of the following: (1) local access with at least a low-privilege operating system account on the target machine; (2) the target system must be physically equipped with a Winbond/Symphony SL82C105 PATA bridge PCI device - without this hardware the vulnerable code path is never reached; (3) the pata_sl82c105 kernel module must load (it loads automatically when the hardware is detected). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Despite the CVSS base score of 7.8 with C:H/I:H/A:H, the realistic exploitation risk is substantially lower than those metrics suggest. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Upstream fix available across multiple stable branches via kernel.org stable commits (see references: git.kernel.org/stable/c/1268ca9418e2, /a626dfca9604, /5ef87b1b4656, /fa0dca89b4fb, /dc711fb137b3, /a837deeaa37c, /56fd78c8c820, /7700a31039cd). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Use lspci, dmidecode, or hardware inventory systems to identify all Linux servers with SL82C105 PCI bridge hardware and categorize by distribution and kernel version; coordinate with infrastructure and procurement teams to compile a definitive affected systems list. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

Vendor StatusVendor

SUSE

Severity: Low
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 16.0 Affected

Share

CVE-2026-80732 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy