CVE-2026-80582: drm/shmem_helper: Check VMA boundaries for PMD mappings

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-26 · updated 2026-08-27

Description

In the Linux kernel, the following vulnerability has been resolved: drm/shmem_helper: Check VMA boundaries for PMD mappings In the ->huge_fault handler do not install a PMD huge page mapping if the huge page exceeds the boundaries of the VMA. All other ->huge_fault handlers have similar checks and the resulting mapping will trigger a VM_BUG_ON_VMA() if it ever reaches copy_pmd_range().

Affected products

Linux kernel: 7.0 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/12803e89a1e593fd1e784dfe7453f5e392ccaff2
https://git.kernel.org/stable/c/617bbd08714857c1613d7c550d43a9092ec0fb97

Get alerted when CVE-2026-80582 or the next vulnerability affects your stack