GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-80591 (GCVE-0-2026-80591)

Vulnerability from cvelistv5 – Published: 2026-08-28 06:48 – Updated: 2026-08-29 06:21
VLAI
Title
f2fs: fix listxattr handling of corrupted xattr entries
Summary
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fs_listxattr(). Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a successful partial result.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 688078e7f36c293dae25b338ddc9e0a2790f6e06 , < 7dfac47e4189692f35230f3064acf2540e6d75fe (git)
Affected: 688078e7f36c293dae25b338ddc9e0a2790f6e06 , < c8a10f174316e80d577e6549099b71a7a2111f3f (git)
Affected: 688078e7f36c293dae25b338ddc9e0a2790f6e06 , < dfa4891c27bccbd83d511a065721e85621f275a1 (git)
Affected: 688078e7f36c293dae25b338ddc9e0a2790f6e06 , < 2770041f34b52334ea63351ffb1cc2007a9de46e (git)
Affected: 688078e7f36c293dae25b338ddc9e0a2790f6e06 , < 7dd01f7d0291583e3e5420c95c7d584e114899bd (git)
Affected: 688078e7f36c293dae25b338ddc9e0a2790f6e06 , < ec9f79c8d5b28a928e65b67cd138c841571cf502 (git)
Affected: 688078e7f36c293dae25b338ddc9e0a2790f6e06 , < 3c0dbfecd859fd02fe9008f33a83146102ccd9ba (git)
Affected: 688078e7f36c293dae25b338ddc9e0a2790f6e06 , < 5ef5bc304f23c3fe255d4936472378dcb74d0e94 (git)
Affected: ae811cecbbb231f11a84acaf74baca1283b964c7 (git)
Affected: ed523cbd4a6594edf123dc03ec9d70ea4f793671 (git)
Affected: 5811f24abd27a8a0791c6909c6ff803659060c84 (git)
Affected: 4.14.181 , < 4.15 (semver)
Affected: 4.19.119 , < 4.20 (semver)
Affected: 5.4.36 , < 5.5 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 5.5
Unaffected: 0 , < 5.5 (semver)
Unaffected: 5.10.261 , ≤ 5.10.* (semver)
Unaffected: 5.15.212 , ≤ 5.15.* (semver)
Unaffected: 6.1.178 , ≤ 6.1.* (semver)
Unaffected: 6.6.145 , ≤ 6.6.* (semver)
Unaffected: 6.12.96 , ≤ 6.12.* (semver)
Unaffected: 6.18.39 , ≤ 6.18.* (semver)
Unaffected: 7.1.5 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/f2fs/xattr.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "7dfac47e4189692f35230f3064acf2540e6d75fe",
              "status": "affected",
              "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06",
              "versionType": "git"
            },
            {
              "lessThan": "c8a10f174316e80d577e6549099b71a7a2111f3f",
              "status": "affected",
              "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06",
              "versionType": "git"
            },
            {
              "lessThan": "dfa4891c27bccbd83d511a065721e85621f275a1",
              "status": "affected",
              "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06",
              "versionType": "git"
            },
            {
              "lessThan": "2770041f34b52334ea63351ffb1cc2007a9de46e",
              "status": "affected",
              "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06",
              "versionType": "git"
            },
            {
              "lessThan": "7dd01f7d0291583e3e5420c95c7d584e114899bd",
              "status": "affected",
              "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06",
              "versionType": "git"
            },
            {
              "lessThan": "ec9f79c8d5b28a928e65b67cd138c841571cf502",
              "status": "affected",
              "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06",
              "versionType": "git"
            },
            {
              "lessThan": "3c0dbfecd859fd02fe9008f33a83146102ccd9ba",
              "status": "affected",
              "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06",
              "versionType": "git"
            },
            {
              "lessThan": "5ef5bc304f23c3fe255d4936472378dcb74d0e94",
              "status": "affected",
              "version": "688078e7f36c293dae25b338ddc9e0a2790f6e06",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "ae811cecbbb231f11a84acaf74baca1283b964c7",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "ed523cbd4a6594edf123dc03ec9d70ea4f793671",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5811f24abd27a8a0791c6909c6ff803659060c84",
              "versionType": "git"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.181",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.119",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.36",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/f2fs/xattr.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.5"
            },
            {
              "lessThan": "5.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.96",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.39",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.261",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.212",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.96",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.39",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.181",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.119",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.36",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix listxattr handling of corrupted xattr entries\n\nValidate the xattr entry before reading its fields in f2fs_listxattr().\nReturn -EFSCORRUPTED when the entry is outside the valid xattr storage\narea instead of returning a successful partial result."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The flaw is reached via local listxattr/flistxattr/listxattrat syscalls through vfs_listxattr into f2fs_listxattr; f2fs is a local block filesystem (Android userdata, embedded flash) and although nfsd/ksmbd can call vfs_listxattr this is a secondary path requiring pre-existing on-disk corruption.\nAC:L - Once a crafted f2fs image with corrupted xattr entry sizes is mounted, the attacker deterministically controls the on-disk layout that makes list_for_each_xattr iterate past last_base_addr; no race, special memory layout, or rare kernel config is required beyond standard CONFIG_F2FS_FS_XATTR.\nPR:L - Planting malformed on-disk xattr metadata requires offline image crafting plus CAP_SYS_ADMIN to loop-mount (obtainable in an unprivileged user namespace) or root for raw block writes; triggering listxattr only needs normal file access on the attacker-controlled mount with no capability checks beyond LSM hooks on the syscall path.\nUI:N - In the highest-impact self-contained attack the attacker crafts a malicious f2fs image and mounts it inside their own user namespace, then calls listxattr on their own inode with no victim action such as opening a file or inserting removable media required.\nS:U - The out-of-bounds read corrupts or leaks kernel heap memory within the same kernel security domain; this is a standard local kernel memory-safety flaw, not a VM escape, container breakout, or IOMMU boundary bypass.\nC:H - Before bounds validation f2fs_listxattr reads entry-\u003ee_name_index and XATTR_NEXT_ENTRY() fields from xattr entries outside the valid storage area, causing slab out-of-bounds reads of adjacent kernel heap objects that can disclose kernel pointers and sensitive kernel data.\nI:H - Although the immediate fault is a read past bounds rather than a write, this is kernel heap memory corruption class behavior; adjacent-slab reads are routinely chained into further kernel exploitation via heap grooming for arbitrary write and code execution, so I:H applies when uncertain.\nA:H - Reading xattr entry fields beyond the kmalloc-allocated buffer can fault the kernel with a slab out-of-bounds access or oops under KASAN/hardening; f2fs_handle_error may log corruption but does not prevent the out-of-bounds read from destabilizing the system on each listxattr invocation."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-29T06:21:06.412Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/7dfac47e4189692f35230f3064acf2540e6d75fe"
        },
        {
          "url": "https://git.kernel.org/stable/c/c8a10f174316e80d577e6549099b71a7a2111f3f"
        },
        {
          "url": "https://git.kernel.org/stable/c/dfa4891c27bccbd83d511a065721e85621f275a1"
        },
        {
          "url": "https://git.kernel.org/stable/c/2770041f34b52334ea63351ffb1cc2007a9de46e"
        },
        {
          "url": "https://git.kernel.org/stable/c/7dd01f7d0291583e3e5420c95c7d584e114899bd"
        },
        {
          "url": "https://git.kernel.org/stable/c/ec9f79c8d5b28a928e65b67cd138c841571cf502"
        },
        {
          "url": "https://git.kernel.org/stable/c/3c0dbfecd859fd02fe9008f33a83146102ccd9ba"
        },
        {
          "url": "https://git.kernel.org/stable/c/5ef5bc304f23c3fe255d4936472378dcb74d0e94"
        }
      ],
      "title": "f2fs: fix listxattr handling of corrupted xattr entries",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-80591",
    "datePublished": "2026-08-28T06:48:19.617Z",
    "dateReserved": "2026-08-26T14:34:25.770Z",
    "dateUpdated": "2026-08-29T06:21:06.412Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-80591",
      "date": "2026-09-15",
      "epss": "0.00129",
      "percentile": "0.02884"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-80591\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-08-28T08:16:42.693\",\"lastModified\":\"2026-08-29T07:16:44.307\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nf2fs: fix listxattr handling of corrupted xattr entries\\n\\nValidate the xattr entry before reading its fields in f2fs_listxattr().\\nReturn -EFSCORRUPTED when the entry is outside the valid xattr storage\\narea instead of returning a successful partial result.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/f2fs/xattr.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"688078e7f36c293dae25b338ddc9e0a2790f6e06\",\"lessThan\":\"7dfac47e4189692f35230f3064acf2540e6d75fe\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"688078e7f36c293dae25b338ddc9e0a2790f6e06\",\"lessThan\":\"c8a10f174316e80d577e6549099b71a7a2111f3f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"688078e7f36c293dae25b338ddc9e0a2790f6e06\",\"lessThan\":\"dfa4891c27bccbd83d511a065721e85621f275a1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"688078e7f36c293dae25b338ddc9e0a2790f6e06\",\"lessThan\":\"2770041f34b52334ea63351ffb1cc2007a9de46e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"688078e7f36c293dae25b338ddc9e0a2790f6e06\",\"lessThan\":\"7dd01f7d0291583e3e5420c95c7d584e114899bd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"688078e7f36c293dae25b338ddc9e0a2790f6e06\",\"lessThan\":\"ec9f79c8d5b28a928e65b67cd138c841571cf502\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"688078e7f36c293dae25b338ddc9e0a2790f6e06\",\"lessThan\":\"3c0dbfecd859fd02fe9008f33a83146102ccd9ba\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"688078e7f36c293dae25b338ddc9e0a2790f6e06\",\"lessThan\":\"5ef5bc304f23c3fe255d4936472378dcb74d0e94\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ae811cecbbb231f11a84acaf74baca1283b964c7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ed523cbd4a6594edf123dc03ec9d70ea4f793671\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5811f24abd27a8a0791c6909c6ff803659060c84\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4.14.181\",\"lessThan\":\"4.15\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.19.119\",\"lessThan\":\"4.20\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.4.36\",\"lessThan\":\"5.5\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/f2fs/xattr.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.5\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.5\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.261\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.212\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.178\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.145\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.96\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.39\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1.5\",\"lessThanOrEqual\":\"7.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/2770041f34b52334ea63351ffb1cc2007a9de46e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/3c0dbfecd859fd02fe9008f33a83146102ccd9ba\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/5ef5bc304f23c3fe255d4936472378dcb74d0e94\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/7dd01f7d0291583e3e5420c95c7d584e114899bd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/7dfac47e4189692f35230f3064acf2540e6d75fe\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/c8a10f174316e80d577e6549099b71a7a2111f3f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/dfa4891c27bccbd83d511a065721e85621f275a1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ec9f79c8d5b28a928e65b67cd138c841571cf502\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-31T05:48:07+00:00",
      "cve": "CVE-2026-80591",
      "id": "CVE-2026-80591",
      "initial_release_date": "2026-08-28T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: f2fs: fix listxattr handling of corrupted xattr entries",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80591.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-15T01:11:04Z",
      "cve": "CVE-2026-80591",
      "id": "CVE-2026-80591",
      "initial_release_date": "2026-08-28T16:37:01Z",
      "product_status:known_affected": "210",
      "product_status:known_not_affected": "143",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-80591",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-80591.json",
      "version": "7"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.