CVE-2026-80749: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: drm/connector/hdmi: Fix out of bounds memory read A helper function was copying a given audio infoframe into the connector's copy but using the size of the destination (a generic target, sized to accept many different data blocks) not the source (a very specific type of data block). Thus, it was copying 60 bytes of data from a 28 byte allocation. Fix that by using the source size instead, together with a build bug on the source size actually being smaller than the destination. I hit this running KUnit tests under KASAN (while debugging something else entirely). In the real world, it seems unlikely to cause an actual problem. It is a read not a write so it can't corrupt any memory. However, it could potentially fall off the end of a page and cause an accvio bug.

Засегнати продукти

• Linux Linux: f378b77227bc4732922c57f92be89438bb1018a1 преди d9f7454c185c0c7f0973e11d62ad6c06862c324c; f378b77227bc4732922c57f92be89438bb1018a1 преди e5b527804a1ea4f70e139179d3062cf5de8c06ab; f378b77227bc4732922c57f92be89438bb1018a1 преди f72bb95732bc5ca87b50c52c8f087ba501950809; f378b77227bc4732922c57f92be89438bb1018a1 преди 9ecf8ba763d0ffe0673538eb4bf7806f20455d19
• Linux Linux: 6.11; преди 6.11; 6.12.105 до 6.12.*; 6.18.46 до 6.18.*; 7.1.10 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-80749
• https://nvd.nist.gov/vuln/detail/CVE-2026-80749
• https://git.kernel.org/stable/c/d9f7454c185c0c7f0973e11d62ad6c06862c324c
• https://git.kernel.org/stable/c/e5b527804a1ea4f70e139179d3062cf5de8c06ab
• https://git.kernel.org/stable/c/f72bb95732bc5ca87b50c52c8f087ba501950809
• https://git.kernel.org/stable/c/9ecf8ba763d0ffe0673538eb4bf7806f20455d19