{
  "cveId": "CVE-2026-80592",
  "url": "https://patchblox.com/security/cve/CVE-2026-80592",
  "summary": "CVE-2026-80592 is fixed in linux on 1 platform by DEBIAN-CVE-2026-80592 (version 7.1.5-1), released August 29, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  samples/damon/mtier: fail early if address range...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  samples/damon/mtier: fail early if address range parameters are invalid  The comment on top of \u0060struct damon_region\u0060 clearly says that      For any use case, @ar should be non-zero positive size.  which is now verified in damon_verify_new_region() if the kernel is built with DAMON_DEBUG_SANITY.  The WARN_ONCE() can be triggered if the mtier sample module is enabled before node{0,1}_{start,end}_addr have been properly initialized, which is obviously not good.   ------------[ cut here ]------------  start 0 \u003E= end 0  WARNING: mm/damon/core.c:217 at damon_new_region\u002B0xf4/0x118, CPU#59: bash/341468  Call trace:   damon_new_region\u002B0xf4/0x118 (P)   damon_set_regions\u002B0xfc/0x3c0   damon_sample_mtier_build_ctx\u002B0xe8/0x3a8   damon_sample_mtier_start\u002B0x1c/0x90   damon_sample_mtier_enable_store\u002B0x98/0xb0   param_attr_store\u002B0xb4/0x128   module_attr_store\u002B0x2c/0x50   sysfs_kf_write\u002B0x58/0x90   kernfs_fop_write_iter\u002B0x16c/0x238   vfs_write\u002B0x2c0/0x370   ksys_write\u002B0x74/0x118   __arm64_sys_write\u002B0x24/0x38   invoke_syscall\u002B0xa8/0x118   el0_svc_common.constprop.0\u002B0x48/0xf0   do_el0_svc\u002B0x24/0x38   el0_svc\u002B0x54/0x370   el0t_64_sync_handler\u002B0xa0/0xe8   el0t_64_sync\u002B0x1ac/0x1b0  ---[ end trace 0000000000000000 ]---  Note that the same issue can happen if detect_node_addresses is true, and node 0 or 1 is memoryless.  Fix it together by checking the validity of parameters right before damon_new_region() and fail early if they\u0027re invalid.",
  "published": "2026-08-28T08:16:42Z",
  "severity": "",
  "epss": 0.00206,
  "epssPercentile": 0.10773,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.1.5-1",
      "fix": "DEBIAN-CVE-2026-80592",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-80592",
      "released": "2026-08-29T00:46:20Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}