GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-80541 (GCVE-0-2026-80541)

Vulnerability from cvelistv5 – Published: 2026-08-26 14:37 – Updated: 2026-08-27 05:01
VLAI
Title
drm/amdgpu: validate GEM_CREATE domain combinations
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEM_CREATE domain combinations AMDGPU_GEM_CREATE checked domain bits against AMDGPU_GEM_DOMAIN_MASK, but did not validate domain combinations. Userspace could combine CPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA, making amdgpu_bo_placement_from_domain() exceed AMDGPU_BO_MAX_PLACEMENTS and hit BUG_ON(). Allow combinations only within CPU/GTT/VRAM, and require non-CPU/GTT/ VRAM domains to be specified one at a time. Return -EINVAL for invalid combinations in amdgpu_gem_create_ioctl(). v2: Rename helper from amdgpu_gem_domain_valid() to amdgpu_gem_are_domains_valid() (Christian) (cherry picked from commit db39852d0c39843cb02048dfb47e4b8c703e9080)
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd , < 5c73485af7ad9c3ae592db3481f370bc07705391 (git)
Affected: 77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd , < 584e3d47736fe2e7184ef3fc16b00b41485f96c6 (git)
Affected: 77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd , < 66133fc05c3af002f45de8a71b833c026ccbfba6 (git)
Affected: 77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd , < ce5da474c3ddf7cccec5dce6aa4296297dd7caff (git)
Affected: 77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd , < 493355096e397f9217b41c8574ed2784c7351443 (git)
Affected: 77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd , < 220aa2589d7321fb68d2e8597862711b5f22ae0b (git)
Affected: 77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd , < 80f0b53860d02577709d69a312a29ca674b9297c (git)
Affected: 77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd , < 5e9d136ad74df4edec67e502ce267597064d8f86 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.20
Unaffected: 0 , < 4.20 (semver)
Unaffected: 5.10.266 , ≤ 5.10.* (semver)
Unaffected: 5.15.217 , ≤ 5.15.* (semver)
Unaffected: 6.1.184 , ≤ 6.1.* (semver)
Unaffected: 6.6.153 , ≤ 6.6.* (semver)
Unaffected: 6.12.105 , ≤ 6.12.* (semver)
Unaffected: 6.18.46 , ≤ 6.18.* (semver)
Unaffected: 7.1.10 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5c73485af7ad9c3ae592db3481f370bc07705391",
              "status": "affected",
              "version": "77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd",
              "versionType": "git"
            },
            {
              "lessThan": "584e3d47736fe2e7184ef3fc16b00b41485f96c6",
              "status": "affected",
              "version": "77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd",
              "versionType": "git"
            },
            {
              "lessThan": "66133fc05c3af002f45de8a71b833c026ccbfba6",
              "status": "affected",
              "version": "77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd",
              "versionType": "git"
            },
            {
              "lessThan": "ce5da474c3ddf7cccec5dce6aa4296297dd7caff",
              "status": "affected",
              "version": "77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd",
              "versionType": "git"
            },
            {
              "lessThan": "493355096e397f9217b41c8574ed2784c7351443",
              "status": "affected",
              "version": "77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd",
              "versionType": "git"
            },
            {
              "lessThan": "220aa2589d7321fb68d2e8597862711b5f22ae0b",
              "status": "affected",
              "version": "77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd",
              "versionType": "git"
            },
            {
              "lessThan": "80f0b53860d02577709d69a312a29ca674b9297c",
              "status": "affected",
              "version": "77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd",
              "versionType": "git"
            },
            {
              "lessThan": "5e9d136ad74df4edec67e502ce267597064d8f86",
              "status": "affected",
              "version": "77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "lessThan": "4.20",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.266",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.217",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.184",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.153",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.105",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.46",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.266",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.217",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.184",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.153",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.105",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.46",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.10",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: validate GEM_CREATE domain combinations\n\nAMDGPU_GEM_CREATE checked domain bits against AMDGPU_GEM_DOMAIN_MASK,\nbut did not validate domain combinations. Userspace could combine\nCPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA, making\namdgpu_bo_placement_from_domain() exceed AMDGPU_BO_MAX_PLACEMENTS and\nhit BUG_ON().\n\nAllow combinations only within CPU/GTT/VRAM, and require non-CPU/GTT/\nVRAM domains to be specified one at a time. Return -EINVAL for invalid\ncombinations in amdgpu_gem_create_ioctl().\n\nv2: Rename helper from amdgpu_gem_domain_valid() to\n    amdgpu_gem_are_domains_valid() (Christian)\n\n(cherry picked from commit db39852d0c39843cb02048dfb47e4b8c703e9080)"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached only via DRM_IOCTL_AMDGPU_GEM_CREATE on a local amdgpu render node (/dev/dri/renderD*); userspace passes crafted domain flags into amdgpu_gem_create_ioctl(), which calls amdgpu_bo_placement_from_domain() during amdgpu_bo_create(). There is no network, adjacent-radio, or physical-access path to this code.\nAC:L - Triggering is a single deterministic ioctl with an invalid domain bitmask (e.g. CPU|GTT|VRAM|DOORBELL); the attacker fully controls the domains field and needs no race, special memory layout, or victim state. Invalid combinations reliably exceed AMDGPU_BO_MAX_PLACEMENTS (3) and hit BUG_ON() on every attempt.\nPR:L - AMDGPU_GEM_CREATE is registered with DRM_AUTH|DRM_RENDER_ALLOW, so any local unprivileged user who can open the render node (default on desktops, ChromeOS, Steam Deck, and cloud GPU tenants via render/video group or ACL) can invoke it without real root or init-namespace capabilities.\nUI:N - The attacking process performs the GEM_CREATE ioctl itself; no other user must mount a filesystem, open a file, click a link, or take any other action for the invalid domain combination to reach amdgpu_bo_placement_from_domain() and panic the kernel.\nS:U - Impact is confined to host-kernel memory corruption and panic within the amdgpu/TTM driver; it does not cross a VM, IOMMU, or sandbox security boundary, and is standard local kernel privilege-escalation/DoS scope rather than a guest-to-host escape.\nC:H - Before BUG_ON(), amdgpu_bo_placement_from_domain() writes past the fixed placements[AMDGPU_BO_MAX_PLACEMENTS] array into adjacent amdgpu_bo fields (including struct ttm_placement) with attacker-influenced mem_type and flag values; this out-of-bounds write is memory corruption that could be leveraged for kernel info disclosure.\nI:H - The same out-of-bounds placement writes corrupt adjacent kernel heap objects in the amdgpu_bo allocation with partially attacker-controlled ttm_place contents; out-of-bounds writes into kernel structures are classed as high integrity impact and could enable further heap corruption or control-flow hijacking.\nA:H - Once placement count exceeds three the kernel hits BUG_ON(c \u003e AMDGPU_BO_MAX_PLACEMENTS), causing an oops or panic; an unprivileged GPU client on shared AMD hardware (multi-user workstations or cloud GPU nodes) can repeatedly crash the entire host, denying service to all co-tenants."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T05:01:30.566Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/5c73485af7ad9c3ae592db3481f370bc07705391"
        },
        {
          "url": "https://git.kernel.org/stable/c/584e3d47736fe2e7184ef3fc16b00b41485f96c6"
        },
        {
          "url": "https://git.kernel.org/stable/c/66133fc05c3af002f45de8a71b833c026ccbfba6"
        },
        {
          "url": "https://git.kernel.org/stable/c/ce5da474c3ddf7cccec5dce6aa4296297dd7caff"
        },
        {
          "url": "https://git.kernel.org/stable/c/493355096e397f9217b41c8574ed2784c7351443"
        },
        {
          "url": "https://git.kernel.org/stable/c/220aa2589d7321fb68d2e8597862711b5f22ae0b"
        },
        {
          "url": "https://git.kernel.org/stable/c/80f0b53860d02577709d69a312a29ca674b9297c"
        },
        {
          "url": "https://git.kernel.org/stable/c/5e9d136ad74df4edec67e502ce267597064d8f86"
        }
      ],
      "title": "drm/amdgpu: validate GEM_CREATE domain combinations",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-80541",
    "datePublished": "2026-08-26T14:37:14.572Z",
    "dateReserved": "2026-08-26T14:34:25.765Z",
    "dateUpdated": "2026-08-27T05:01:30.566Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-80541",
      "date": "2026-09-16",
      "epss": "0.00129",
      "percentile": "0.02905"
    },
    "microsoft_vex": {
      "current_release_date": "2026-08-27T01:05:44.000Z",
      "cve": "CVE-2026-80541",
      "id": "msrc_CVE-2026-80541",
      "initial_release_date": "2026-08-27T01:05:44.000Z",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "drm/amdgpu: validate GEM_CREATE domain combinations",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-80541.json",
      "version": "1"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-80541\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-08-26T15:17:08.400\",\"lastModified\":\"2026-08-27T06:17:35.123\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/amdgpu: validate GEM_CREATE domain combinations\\n\\nAMDGPU_GEM_CREATE checked domain bits against AMDGPU_GEM_DOMAIN_MASK,\\nbut did not validate domain combinations. Userspace could combine\\nCPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA, making\\namdgpu_bo_placement_from_domain() exceed AMDGPU_BO_MAX_PLACEMENTS and\\nhit BUG_ON().\\n\\nAllow combinations only within CPU/GTT/VRAM, and require non-CPU/GTT/\\nVRAM domains to be specified one at a time. Return -EINVAL for invalid\\ncombinations in amdgpu_gem_create_ioctl().\\n\\nv2: Rename helper from amdgpu_gem_domain_valid() to\\n    amdgpu_gem_are_domains_valid() (Christian)\\n\\n(cherry picked from commit db39852d0c39843cb02048dfb47e4b8c703e9080)\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd\",\"lessThan\":\"5c73485af7ad9c3ae592db3481f370bc07705391\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd\",\"lessThan\":\"584e3d47736fe2e7184ef3fc16b00b41485f96c6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd\",\"lessThan\":\"66133fc05c3af002f45de8a71b833c026ccbfba6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd\",\"lessThan\":\"ce5da474c3ddf7cccec5dce6aa4296297dd7caff\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd\",\"lessThan\":\"493355096e397f9217b41c8574ed2784c7351443\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd\",\"lessThan\":\"220aa2589d7321fb68d2e8597862711b5f22ae0b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd\",\"lessThan\":\"80f0b53860d02577709d69a312a29ca674b9297c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd\",\"lessThan\":\"5e9d136ad74df4edec67e502ce267597064d8f86\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.20\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.20\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.266\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.217\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.184\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.153\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.105\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.46\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1.10\",\"lessThanOrEqual\":\"7.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/220aa2589d7321fb68d2e8597862711b5f22ae0b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/493355096e397f9217b41c8574ed2784c7351443\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/584e3d47736fe2e7184ef3fc16b00b41485f96c6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/5c73485af7ad9c3ae592db3481f370bc07705391\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/5e9d136ad74df4edec67e502ce267597064d8f86\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/66133fc05c3af002f45de8a71b833c026ccbfba6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/80f0b53860d02577709d69a312a29ca674b9297c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ce5da474c3ddf7cccec5dce6aa4296297dd7caff\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-27T07:21:47+00:00",
      "cve": "CVE-2026-80541",
      "id": "CVE-2026-80541",
      "initial_release_date": "2026-08-26T00:00:00+00:00",
      "product_status:known_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: drm/amdgpu: validate GEM_CREATE domain combinations",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80541.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-01T00:50:20Z",
      "cve": "CVE-2026-80541",
      "id": "CVE-2026-80541",
      "initial_release_date": "2026-08-27T00:12:15Z",
      "product_status:known_affected": "176",
      "product_status:known_not_affected": "177",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-80541",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-80541.json",
      "version": "5"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.