CVE-2026-80732ata: pata_sl82c105: fix bridge revision use-after-free
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-free pci_get_slot() returns a referenced PCI device. Commit 44c10138fd4b ("PCI: Change all drivers to use pci_device->revision") replaced a configuration-space read with direct access to the cached revision field, but left that access after pci_dev_put(). The bridge may therefore be freed before its revision is read. Read the revision before dropping the reference.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 4, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before 1268ca9418e2217f2b60705cf4a280b689b26678; from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before a626dfca96041842053cf2d1efceb436c4cd8dcf; 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 builds before 5ef87b1b4656d675440ceab32a56e69ad958d3a1; from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before fa0dca89b4fb0909ffda7b9ab6051af33270f95e; from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before dc711fb137b33c12e6ca22b6a9c9b9f21d49e4de; from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before a837deeaa37cc3f0e8c4e5c096787047f272c956; from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before 56fd78c8c820f527f8003e379ab71004b2e79a44; from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before 7700a31039cdc6715cb6cce7e7a664ee4e945f67 | CNA record |
References
- https://git.kernel.org/stable/c/1268ca9418e2217f2b60705cf4a280b689b26678
- https://git.kernel.org/stable/c/a626dfca96041842053cf2d1efceb436c4cd8dcf
- https://git.kernel.org/stable/c/5ef87b1b4656d675440ceab32a56e69ad958d3a1
- https://git.kernel.org/stable/c/fa0dca89b4fb0909ffda7b9ab6051af33270f95e
- https://git.kernel.org/stable/c/dc711fb137b33c12e6ca22b6a9c9b9f21d49e4de
- https://git.kernel.org/stable/c/a837deeaa37cc3f0e8c4e5c096787047f272c956
- https://git.kernel.org/stable/c/56fd78c8c820f527f8003e379ab71004b2e79a44
- https://git.kernel.org/stable/c/7700a31039cdc6715cb6cce7e7a664ee4e945f67
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.