Skip to main content

Linux Kernel CVE-2026-80745

| EUVDEUVD-2026-70349 HIGH
2026-09-03 Linux GHSA-q96v-q649-9jp5
Buffer Overflow Linux Suse
High
Disputed · 8.4 Vendor: Linux
Share

Severity by source

Sources disagree (Low–High)
Vendor (Linux) PRIMARY
8.4 HIGH
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vuln.today AI
7.8 HIGH

Local kernel driver OOB; PR:L over vendor PR:N because sysfs regulator writes or internal subsystem calls require at minimum local user context.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
SUSE
3.3 LOW
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: Linux

Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

5
Analysis Generated
Sep 04, 2026 - 05:29 vuln.today
CVSS changed
Sep 04, 2026 - 05:22 NVD
8.4 (HIGH)
Patch available
Sep 03, 2026 - 10:16 EUVD
CVE Published
Sep 03, 2026 - 08:26 cve.org
UNKNOWN (no severity yet)
CVE Published
Sep 03, 2026 - 08:26 cve.org
HIGH 8.4

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

regulator: fp9931: Fix VPOS/VNEG voltage selector table

The VPOSNEG_table[] mapping does not match the FP9931 datasheet.

The datasheet defines the VPOS/VNEG voltage mapping as:

00h-04h -> 7.04V (-7.04V) 05h -> 7.26V (-7.26V) 06h -> 7.49V (-7.49V) ... 28h-3Fh -> 15.06V (-15.06V)

However, VPOSNEG_table[] has two issues:

  1. Selector 0x00~0x04 should all map to 7.04V (5 entries), but the

table has 6 entries of 7.04V, causing all subsequent entries to be shifted by one position.

  1. Selectors 0x29~0x3F should all clamp to 15.06V (23 entries), but

the table has only 41 entries. Any selector value above 0x28 would result in an out-of-bounds table access.

Fix both issues by removing the duplicate 7.04V entry and appending the missing 23 clamped 15.06V entries, bringing the table to the correct size of 64 entries (0x00~0x3F).

AnalysisAI

Out-of-bounds table access in the Linux kernel fp9931 regulator driver exposes kernel memory to corruption via a malformed VPOS/VNEG voltage selector lookup table. The fp9931 driver's VPOSNEG_table[] contains two defects: a duplicate 7.04V entry that shifts all subsequent selector mappings by one, and a truncated table of only 41 entries instead of the required 64, meaning any selector value above 0x28 triggers an out-of-bounds access in kernel memory. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires physical hardware incorporating the FP9931 PMIC chip as the display panel power supply regulator - this driver is not present on general-purpose or server-class hardware. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The vendor-assigned CVSS 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflects the potential for full kernel memory compromise from the OOB access, but the PR:N metric is likely overstated for this attack class: triggering a regulator voltage selector with an out-of-range value (>0x28) requires either hardware-level interaction via the FP9931-equipped display subsystem or write access to sysfs regulator nodes, both of which imply at least local user context. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Apply the upstream kernel fix via the stable commits available at https://git.kernel.org/stable/c/92a9594053831bf4c5886519688e155912befaee (Linux 7.1.10 stable branch) and https://git.kernel.org/stable/c/66694b5f90f3876fccb87bbd02b453cdc33b3ae4 (Linux 7.2 stable branch). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, inventory systems and devices in your infrastructure that incorporate the FP9931 PMIC regulator, particularly display-panel hardware in embedded systems, servers, or IoT deployments. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Low
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0 Not-Affected

Share

CVE-2026-80745 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy