CVE-2026-80961

CVE-2026-80961 affects the dm-pcache (Device-Mapper Persistent Cache) component of the Linux kernel . Two fields decoded from the cache device are left unbounded: the kset key_num , which can exceed the PCACHE_KSET_KEYS_MAX buffer before the CRC comparison, and the key's intra-segment offset and ...

CVE-2026-80961 dm-pcache: validate kset key_num and intra-segment bounds

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate kset keynum and intra-segment bounds Two more fields decoded from the cache device go unbounded. The kset keynum drives cacheksetcrc and the replay loop in cachereplay, the writeback worker and the GC worker,...