{
  "cveId": "CVE-2026-80645",
  "url": "https://patchblox.com/security/cve/CVE-2026-80645",
  "summary": "CVE-2026-80645 is fixed in linux on 1 platform, first by DEBIAN-CVE-2026-80645, released August 29, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  rapidio/tsi721: prevent a bad dereference in tsi...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()  With a list_for_each() loop, if we don\u0027t find the item we are looking for in the list, then the loop exits with the iterator, which is \u0022dbell\u0022 in this loop, pointing to invalid memory.  This code uses the \u0022found\u0022 variable to determine if we have found the doorbell we are looking for or not.  However, the problem that the \u0022found\u0022 variable needs to be set to false at the start of each iteration, otherwise after the first correct doorbell, then everything is marked as found.  Reset the \u0022found\u0022 to false at the start of the iteration and move the variable inside the loop.",
  "published": "2026-08-28T08:16:49Z",
  "severity": "high",
  "cvss": 8.1,
  "cvssVector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
  "epss": 0.00402,
  "epssPercentile": 0.34696,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.180-1",
      "fix": "DEBIAN-CVE-2026-80645",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-80645",
      "released": "2026-08-29T00:46:20Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.100-1",
      "fix": "DEBIAN-CVE-2026-80645",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-80645",
      "released": "2026-08-29T00:46:20Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.1.5-1",
      "fix": "DEBIAN-CVE-2026-80645",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-80645",
      "released": "2026-08-29T00:46:20Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}