CVE-2026-80724

Last refreshed2026-10-19

Status: UPDATED | Advisory ID: CVE-2026-80724

Key Details

CVE	CVE-2026-80724
CVSS Score / Version	8.8 (High) / CVSS v3.1
Updated	2026-10-19
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

ptp: vmclock: prevent read-only mappings from becoming writable

vmclock_miscdev_mmap() rejects writable mappings of the shared vmclock

ABI page with -EROFS, but leaves VM_MAYWRITE set. Userspace can map the

page read-only and then upgrade it to writable with mprotect(), after

which the guest can corrupt the host-written timekeeping data (sequence

counter, UTC time, TSC offset) that the vmclock ABI defines as read-only.

Clear VM_MAYWRITE on the read-only path so the mapping cannot be

upgraded, as i915 does for its read-only objects and as fixed in drm/vc4

(CVE-2026-68445) and drm/panthor (CVE-2024-53071). (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-80724
CVE	https://www.cve.org/CVERecord?id=CVE-2026-80724

Source

Reference

NVD

CVE