CVE-2026-80961 dm-pcache: validate kset key_num and intra-segment bounds

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate kset keynum and intra-segment bounds Two more fields decoded from the cache device go unbounded. The kset keynum drives cacheksetcrc and the replay loop in cachereplay, the writeback worker and the GC worker,...

CVE-2026-80961

CVE-2026-80961 affects the dm-pcache (device-mapper persistent cache) subsystem of the Linux kernel. Two unvalidated fields decoded from the cache device — the kset key_num and a key's intra-segment offset/length — allow an out-of-bounds read of persistent memory that leaks into user space via th...