Back to CVE records
Critical 9.8Published Aug 28, 2026
CVE-2026-80609qede: fix out-of-bounds check for cqe->len_list[]
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[] Move index check before element access.
- CVSS
- 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from ecbb12caf399d7cf364b7553ed5aebeaa2f255bc before 6d203bdd227fca1787f8a80cf84b990936633c5a; from a778912b4a53587ea07d85526d152f85d109cbfe before bd3a6a083b408e96437dbd86ff543ba9ec3a788b; from f0923011c1261b33a2ac1de349256d39cb750dd0 before e30af53dca803893a29eb3bbe0539752ba435410; 917a9d02182ac8b4f25eb47dc02f3ec679608c24 builds before 1aacefd074b5dcc99b8dbcd73e1c963ed5010110; from 896f1a2493b59beb2b5ccdf990503dbb16cb2256 before b17751a2ebc4aef3ce6be6f71ee8df92bf5ddfcd; 896f1a2493b59beb2b5ccdf990503dbb16cb2256 builds before 6d46ab395803f162cdc50e8d346e5f1a4e766771; from 896f1a2493b59beb2b5ccdf990503dbb16cb2256 before f9ba47fce5932c15891c89c60e76dfaca919cb8d; e441db07f208184e0466abf44b389a81d70c340e; and 5 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/6d203bdd227fca1787f8a80cf84b990936633c5a
- https://git.kernel.org/stable/c/bd3a6a083b408e96437dbd86ff543ba9ec3a788b
- https://git.kernel.org/stable/c/e30af53dca803893a29eb3bbe0539752ba435410
- https://git.kernel.org/stable/c/1aacefd074b5dcc99b8dbcd73e1c963ed5010110
- https://git.kernel.org/stable/c/b17751a2ebc4aef3ce6be6f71ee8df92bf5ddfcd
- https://git.kernel.org/stable/c/6d46ab395803f162cdc50e8d346e5f1a4e766771
- https://git.kernel.org/stable/c/f9ba47fce5932c15891c89c60e76dfaca919cb8d
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.