7.1

CVE-2026-80663: linux

CVSS: 7.1v3.1HighReceived
AliasesUBUNTU-CVE-2026-80663DEBIAN-CVE-2026-80663
Published 28-08-2026Last modified 16-10-2026
Open JSON

Vulnerability summary

CVE-2026-80663 is a high (CVSS 7.1) vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.1% of scored vulnerabilities.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.1/10
010
High · v3.1 (CVE.org)
EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 13 · Related 13
SUSE-SU-2026:24181-1SUSE-SU-2026:24182-1SUSE-SU-2026:4640-1SUSE-SU-2026:4660-1SUSE-SU-2026:4706-1USN-8887-1

Timeline

  1. 28-08-2026
    PublishedVulnerability first disclosed.
  2. 16-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with O_NOFOLLOW and validating it with fstat() before locking/writing. The daemon currently uses a fixed pidfile path under /tmp. A local unprivileged user can pre-create a symlink at that path and cause a root-run daemon instance to write into an attacker-chosen file.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.13%

Chance of exploitation in the next 30 days

Percentile

2%

Versus all other CVEs

30-day change

0.00 pp

From 0.13% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu142 products
  • linuxAll versions (No fix recorded) | < 6.8.0-147.147 | < 7.0.0-38.38
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1067.70 | < 7.0.0-1014.14
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.180-1 | < 6.12.100-1 | < 7.1.5-1
Linux1 product
  • linux≥ 7fd786dfbd2c55ddee3b87f33c82f1c58bdb1dd6, < 905493a6338c82a70da16f86e0a6215db5a3d73d | ≥ 7fd786dfbd2c55ddee3b87f33c82f1c58bdb1dd6, < db938eb9a3c1317596c28e94413b33426508d51b | ≥ 7fd786dfbd2c55ddee3b87f33c82f1c58bdb1dd6, < 72a07abc6b9046f07a08bba353cad7667bcc9dce | ≥ 7fd786dfbd2c55ddee3b87f33c82f1c58bdb1dd6, < 19ffeb30fdfce63f8d6aca71bcdddb3f69d46278 | ≥ 7fd786dfbd2c55ddee3b87f33c82f1c58bdb1dd6, < e8adac69d1bdf035ef97cc914e845acd4ef08e28 | ≥ 7fd786dfbd2c55ddee3b87f33c82f1c58bdb1dd6, < 607af438e6430893a822964c841a1994b33acccc | 5.18

3 vendors · 144 products

References

18 links
Show all 18 references