CVE-2026-80706

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-80706

Key Details

CVE	CVE-2026-80706
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

can: softing: fw_parse(): validate firmware record spans

fw_parse() reads a fixed record header, a firmware-provided payload,

and a trailing checksum without knowing the end of the firmware blob. A

truncated record can therefore make those reads exceed the blob.

The same record also supplies addresses and lengths for writes into

DPRAM. The generic loader uses wrap-prone mixed signed arithmetic for its

bounds check, while the application loader does not bound the staging

copy at all.

Pass the firmware end to the parser and validate the full source record.

Use a signed wide offset for generic DPRAM records and validate the

application staging span against the mapped DPRAM before copying. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-80706
CVE	https://www.cve.org/CVERecord?id=CVE-2026-80706

Source

Reference

NVD

CVE