CVE-2026-80720— iomap: add a separate bio_set for iomap_split_ioend
Quick assessment
Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Linux 内核中，以下漏洞已得到修复： iomap：为 iomap_split_ioend 增加独立的 bio 分配池（bio_set） 函数可能会拆分来自 的 bio，当该 bio 分配池耗尽时可能导致死锁。 通过添加一个独立的 来避免此死锁问题。 Christian Brauner <brauner@kernel.org> 指出： 将 声明为静态（static），因为它仅在 中使用，从而修复了内核测试机器人（kernel test robot）报告的 sparse 警告。
Possible ATT&CK Techniques 1 AI
T1203 · Exploitation for Client ExecutionAffected Version Matrix 8
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 5fcbd555d48390a8c819ba7fdf55fbfcabe05c80< cfc686a1174aa904dcad9b9a7c5e46b484d27e4e |
affected |
5fcbd555d48390a8c819ba7fdf55fbfcabe05c80< 4a869be56e9f6ce7462abcf324ebdefc5de051be |
affected | ||
5fcbd555d48390a8c819ba7fdf55fbfcabe05c80< c679ce3be6cb63763d68ab9b5d9d73ddc0a40762 |
affected | ||
6.15 |
affected | ||
< 6.15 |
unaffected | ||
6.18.44≤ 6.18.* |
unaffected | ||
7.1.8≤ 7.1.* |
unaffected | ||
7.2≤ * |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-80720
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
iomap: add a separate bio_set for iomap_split_ioend
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
iomap: add a separate bio_set for iomap_split_ioend
iomap_split_ioend can split bios that already come from
iomap_ioend_bioset and thus deadlock when the bioset is exhausted.
Add a separate bio_set to avoid this deadlock.
Christian Brauner <brauner@kernel.org> says:
Mark iomap_ioend_split_bioset static as it is only used in ioend.c,
fixing the sparse warning reported by the kernel test robot.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-80720
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-80720
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-80720 (2)
Same Patch Batch · Linux · 2026-08-28 · 135 CVEs total
| CVE-2026-80634 | 9.8 CRITICAL | netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag |
| CVE-2026-80694 | 9.8 CRITICAL | net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller |
| CVE-2026-80681 | 9.8 CRITICAL | vxlan: re-fetch eth header after route_shortcircuit() |
| CVE-2026-80674 | 9.8 CRITICAL | ntfs: validate resident attribute lists and harden the validator |
| CVE-2026-80673 | 9.8 CRITICAL | ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find() |
| CVE-2026-80668 | 9.8 CRITICAL | netfilter: nf_conntrack_expect: use conntrack GC to reap expectations |
| CVE-2026-80630 | 9.8 CRITICAL | net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restorin |
| CVE-2026-80617 | 9.8 CRITICAL | net: airoha: fix foe_check_time allocation size |
| CVE-2026-80612 | 9.8 CRITICAL | net: lwtunnel: Drop skb metadata before LWT encapsulation |
| CVE-2026-80609 | 9.8 CRITICAL | qede: fix out-of-bounds check for cqe->len_list[] |
| CVE-2026-80714 | 9.8 CRITICAL | ipvs: do not propagate one-packet flag to synced conns |
| CVE-2026-80600 | 9.8 CRITICAL | batman-adv: dat: acquire ARP hw source only after skb realloc |
| CVE-2026-80693 | 9.3 CRITICAL | idpf: bound interrupt-vector register fill to the allocated array |
| CVE-2026-80684 | 9.3 CRITICAL | KVM: s390: pci: Fix NULL dereference on AIBV allocation failure |
| CVE-2026-80671 | 9.3 CRITICAL | perf sched: Fix register_pid() overflow, strcpy, and BUG_ON |
| CVE-2026-80603 | 9.1 CRITICAL | netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read |
| CVE-2026-80670 | 9.1 CRITICAL | perf tools: Use perf_env__get_cpu_topology() in machine__resolve() |
| CVE-2026-80722 | 8.8 HIGH | wifi: mac80211: validate individual TWT params before driver setup |
| CVE-2026-80683 | 8.8 HIGH | Bluetooth: SCO: give the socket its own sco_conn reference |
| CVE-2026-80692 | 8.8 HIGH | Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks |
Showing top 20 of 135 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
-
CVE-2026-80725
net: gro: properly validate BIG TCP aggregation criteria -
CVE-2026-80724
ptp: vmclock: prevent read-only mappings from becoming writa -
CVE-2026-80722
wifi: mac80211: validate individual TWT params before driver -
CVE-2026-80723
of: reserved_mem: prevent OOB when too many dynamic regions -
CVE-2026-80721
Bluetooth: ISO: ensure no dangling hcon references in iso_co
Same vendor: Linux
-
CVE-2026-80725
net: gro: properly validate BIG TCP aggregation criteria -
CVE-2026-80724
ptp: vmclock: prevent read-only mappings from becoming writa -
CVE-2026-80722
wifi: mac80211: validate individual TWT params before driver -
CVE-2026-80723
of: reserved_mem: prevent OOB when too many dynamic regions -
CVE-2026-80721
Bluetooth: ISO: ensure no dangling hcon references in iso_co
V. Comments for CVE-2026-80720
No comments yet