Strix
63.5K

CVE-2026-80732

HIGHCVSS 7.8/10EPSS 0.21%

Last modified

CVE-2026-80732 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-free pci_get_slot() returns a referenced PCI device. Commit 44c10138fd4b ("PCI: Change all drivers to use pci_device->revision") replaced a configuration-space read with direct access to the cached revision field, but left that access after pci_dev_put(). EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-free pci_get_slot() returns a referenced PCI device. Commit 44c10138fd4b ("PCI: Change all drivers to use pci_device->revision") replaced a configuration-space read with direct access to the cached revision field, but left that access after pci_dev_put(). The bridge may therefore be freed before its revision is read. Read the revision before dropping the reference.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.21%

11.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 44c10138fd4bbc4b6d6bff0873c24902f2a9da65, < 1268ca9418e2217f2b60705cf4a280b689b26678; >= 44c10138fd4bbc4b6d6bff0873c24902f2a9da65, < a626dfca96041842053cf2d1efceb436c4cd8dcf; >= 44c10138fd4bbc4b6d6bff0873c24902f2a9da65, < 5ef87b1b4656d675440ceab32a56e69ad958d3a1; >= 44c10138fd4bbc4b6d6bff0873c24902f2a9da65, < fa0dca89b4fb0909ffda7b9ab6051af33270f95e; >= 44c10138fd4bbc4b6d6bff0873c24902f2a9da65, < dc711fb137b33c12e6ca22b6a9c9b9f21d49e4de; >= 44c10138fd4bbc4b6d6bff0873c24902f2a9da65, < a837deeaa37cc3f0e8c4e5c096787047f272c956; >= 44c10138fd4bbc4b6d6bff0873c24902f2a9da65, < 56fd78c8c820f527f8003e379ab71004b2e79a44; >= 44c10138fd4bbc4b6d6bff0873c24902f2a9da65, < 7700a31039cdc6715cb6cce7e7a664ee4e945f67
LinuxLinux2.6.23

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-80732?
In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-free pci_get_slot() returns a referenced PCI device. Commit 44c10138fd4b ("PCI: Change all drivers to use pci_device->revision") replaced a configuration-space read with direct access to the cached revision field, but left that access after pci_dev_put(). The bridge may therefore be freed before its revision is read. Read the revision before dropping the reference.
How severe is CVE-2026-80732?
CVE-2026-80732 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-80732?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-80732?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST