CVE-2026-80867

CVE-2026-80867

published September 4, 2026

CVSS
—
EPSS
0%
Percentile
11.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

alpha/PCI: Add security_locked_down() check to pci_mmap_resource()

Currently, Alpha's pci_mmap_resource() does not check

security_locked_down(LOCKDOWN_PCI_ACCESS) before allowing userspace to mmap

PCI BARs.

The generic version has had this check since commit eb627e17727e ("PCI:

Lock down BAR access when the kernel is locked down") to prevent DMA

attacks when the kernel is locked down.

Add the same check to Alpha's pci_mmap_resource().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.8th percentile
Published
2026-09-04T21:16Z
References (8)
EPSS history
Timeline
  • 06 SEP 03:33Z
    EPSS moved — → 0%
    epss
  • 04 SEP 16:48Z
    alpha/PCI: Add security_locked_down() check to pci_mmap_resource()
    cvelistv5