CVE-2026-80540: linux
CVSS: 7.8v3.1HighReceived
AliasesUBUNTU-CVE-2026-80540DEBIAN-CVE-2026-80540
Published 26-08-2026Last modified 16-10-2026
Vulnerability summary
CVE-2026-80540 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.3% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 12 · Related 11Timeline
- 26-08-2026PublishedVulnerability first disclosed.
- 16-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow. (cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.13%
Chance of exploitation in the next 30 days
Percentile
2%
Versus all other CVEs
30-day change
0.00 pp
From 0.13% on 21-09-2026
21-09-202621-10-2026
EPSS score0.13%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu169 products
- linuxAll versions (No fix recorded)
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded)
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.187-1 | < 6.12.105-1 | < 7.1.10-1
- linux-6.12< 6.12.107-1~deb12u1
Linux1 product
- linux≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < bc7397a033ac52f6d8c9bb6510d61694b2a3fce7 | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < d058f7a6709441afe1784eecd8c0643dd84750bc | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < b7549e3f96c78921751c4b3e69af729662130d83 | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 60539d517e8439621532d8c01091ac049c596b4b | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 271a7da84a6262a09de549912dcf6a749d169cb6 | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 25ee120f3803ad9e416ef9f76f4c3234cc4d645b | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 5cbd8af02b0b9c8723fa30edcf6fccab5170af8d | ≥ d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < b8bb9ba3f101a1b0011f785a577a4a0a38371174 | 4.2
3 vendors · 172 products
