CVE-2026-80887: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-80887DEBIAN-CVE-2026-80887
Published 04-09-2026Last modified 04-09-2026
Open JSON

Vulnerability summary

CVE-2026-80887 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.7% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.17%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3
RHSA-2026:81552RHSA-2026:82806RHSA-2026:82807

Timeline

  1. 04-09-2026
    PublishedVulnerability first disclosed.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overflow for shader size+offset bound vmw_shader_define() validates the user-supplied shader window against its backing buffer with (u64)buffer->tbo.base.size < (u64)size + (u64)offset drm_vmw_shader_create_arg::offset is __u64 in the uapi; when it is near U64_MAX the unsigned addition wraps and the resulting tiny value passes the check. The unbounded offset is then stored in res->guest_memory_offset and forwarded to host SVGA shader-create commands. Use check_add_overflow() to detect the wrap and compare the resulting endpoint against the buffer size.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

6%

Versus all other CVEs

30-day change

0.00 pp

From 0.17% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu142 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.12.105-1 | < 7.1.8-1
  • linux-6.12< 6.12.107-1~deb12u1
Linux1 product
  • linux≥ 668b206601c5f5063e03b76784a0d3024fa2b249, < 1bbe7751f5ebac383405ef29a66622d65bd505d3 | ≥ 668b206601c5f5063e03b76784a0d3024fa2b249, < d3f44438aa805270aaead3b6840ccaea0f4c11f9 | ≥ 668b206601c5f5063e03b76784a0d3024fa2b249, < cfd163169af3be56eaef113c680ea251f0d09189 | ≥ 668b206601c5f5063e03b76784a0d3024fa2b249, < 5c725901908eb1e52a16fc0e2373cb761df42d21 | ≥ 668b206601c5f5063e03b76784a0d3024fa2b249, < 54d56d5b42d2e4c72ba6e365e9774da90698aa22 | 6.4

3 vendors · 145 products

References

10 links