CVE-2026-80779
Last modified
CVE-2026-80779 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ The dedicated hardware timestamp RX queue is allocated with q->index equal to lif->ionic->nrxqs_per_lif. The normal txqcqs array only contains the regular queue pairs, so using that index to set rxq->partner can read one entry past txqcqs[] and then write through the derived pointer. Only link RX/TX partners for normal queue-pair indexes.
Description
In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ The dedicated hardware timestamp RX queue is allocated with q->index equal to lif->ionic->nrxqs_per_lif. The normal txqcqs array only contains the regular queue pairs, so using that index to set rxq->partner can read one entry past txqcqs[] and then write through the derived pointer. Only link RX/TX partners for normal queue-pair indexes. Leave the hwstamp RX queue unpaired, and make the XDP_TX path abort cleanly if an RX queue has no TX partner.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 8eeed8373e1cca836799bf8e4a05cffa8e444908, < 881a805a8029ba48c0ce81c6674910f8d83f7afb; >= 8eeed8373e1cca836799bf8e4a05cffa8e444908, < 39fc615e355b65b8d43be30da57aa95ae6eaf688; >= 8eeed8373e1cca836799bf8e4a05cffa8e444908, < f3868046e8e2e761d4d943a232bd109ff22a7d5b; >= 8eeed8373e1cca836799bf8e4a05cffa8e444908, < ea081b4435515ac7177eb598a3c0678d1b9e7911; >= 8eeed8373e1cca836799bf8e4a05cffa8e444908, < d92255b405fb6f5acca408239ccd742e0a42c9cb |
| Linux | Linux | 6.9 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-80779?
How severe is CVE-2026-80779?
How do I fix CVE-2026-80779?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-80773In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80774In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80775In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80776In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80777In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80778In the Linux kernel, the following vulnerability has been re…
- CVE-2026-8078Stored cross-site scripting in the global settings change lo…4.8
- CVE-2026-80780In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80781In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80782In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80783In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80784In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-80779?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST