Linux Kernel up to 7.1.9 drm/shmem_helper drm/shmem_helper.c huge_fault memory corruption

Summaryinfo

A vulnerability marked as very critical has been reported in Linux Kernel up to 7.1.9. This affects the function huge_fault of the file drm/shmem_helper.c of the component drm/shmem_helper. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2026-80582. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.1.9. This issue affects the function huge_fault of the file drm/shmem_helper.c of the component drm/shmem_helper. The manipulation with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

In the Linux kernel, the following vulnerability has been resolved: drm/shmem_helper: Check VMA boundaries for PMD mappings In the ->huge_fault handler do not install a PMD huge page mapping if the huge page exceeds the boundaries of the VMA. All other ->huge_fault handlers have similar checks and the resulting mapping will trigger a VM_BUG_ON_VMA() if it ever reaches copy_pmd_range().

It is possible to read the advisory at git.kernel.org. The identification of this vulnerability is CVE-2026-80582 since 08/26/2026. The exploitation is known to be easy. The attack may be initiated remotely. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 08/26/2026).

Upgrading to version 7.1.10 eliminates this vulnerability. Applying the patch 12803e89a1e593fd1e784dfe7453f5e392ccaff2/617bbd08714857c1613d7c550d43a9092ec0fb97 is able to eliminate this problem.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 7.1.0
• 7.1.1
• 7.1.2
• 7.1.3
• 7.1.4
• 7.1.5
• 7.1.6
• 7.1.7
• 7.1.8
• 7.1.9

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion