CVE-2026-80959 dm-pcache: bound the persisted tail-position offset

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the persisted tail-position offset cacheposdecode takes the persisted keytail and dirtytail segoff from the cache device and addresses within the segment with it. A segoff at or past the segment datasize,...

CVE-2026-80959

CVE-2026-80959 affects the Linux kernel component dm-pcache (Device Mapper persistent cache). The vulnerable function is cache_pos_decode(), which uses persisted key_tail and dirty_tail seg_off values to address memory within a cache segment. If a seg_off value is at or past the segment's data_si...