CVE Catalog

CVE-2026-80609

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.17%

7th percentile - higher than 7% of all known CVEs

Summary

In the Linux kernel, the qede driver had an out-of-bounds check issue in cqe->len_list[], where the index check was performed after element access. The fix moves the index check before the access.

Risk Assessment

This could lead to out-of-bounds memory reads, potentially causing system crashes or information disclosure.

Recommendation

Apply the Linux kernel update with this fix to eliminate the risk of out-of-bounds reads in the qede driver.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[] Move index check before element access.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS