Description
In the Linux kernel, the following vulnerability has been resolved:

drm/shmem_helper: Check VMA boundaries for PMD mappings

In the ->huge_fault handler do not install a PMD huge page
mapping if the huge page exceeds the boundaries of the VMA.

All other ->huge_fault handlers have similar checks and the
resulting mapping will trigger a VM_BUG_ON_VMA() if it ever
reaches copy_pmd_range().
Published: 2026-08-26
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Kernel memory corruption
Action: Apply Update
AI Analysis

Impact

In the Linux kernel, the drm/shmem_helper module contains a huge page fault handler that, when a PMD mapping exceeds the boundaries of a virtual memory area, can install the mapping without proper bounds checking, resulting in out‑of‑bounds memory writes or reads. This can corrupt kernel data structures or trigger a kernel panic via VM_BUG_ON_VMA. The associated weakness is identified as CWE-787.

Affected Systems

All Linux kernels that include the drm/shmem_helper module are affected, regardless of distribution. No specific version range is supplied, so any kernel built before the patch is potentially vulnerable.

Risk and Exploitability

The EPSS score (<1%) reflects a very low but nonzero likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is an out‑of‑bounds PMD mapping triggered by a huge page fault within a VMA, potentially resulting in kernel memory corruption. The CVSS score of 7.8 indicates a high‑severity issue.

Generated by OpenCVE AI on August 28, 2026 at 17:39 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest kernel release that includes the patch for drm/shmem_helper, which corrects out‑of‑bounds read/write checks (CWE-787).
  • If you compile a custom kernel or DRM components, rebuild all affected modules with the patched source to ensure the bounds checks are present.
  • Monitor kernel logs for VM_BUG_ON_VMA or panic messages; consider disabling or restricting DRM features that rely on large page mappings if the patch cannot be applied immediately.

Generated by OpenCVE AI on August 28, 2026 at 17:39 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 28 Aug 2026 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-788

Thu, 27 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-787
References
Metrics threat_severity

None

 threat_severity

Moderate

Thu, 27 Aug 2026 06:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Wed, 26 Aug 2026 16:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-788

Wed, 26 Aug 2026 14:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/shmem_helper: Check VMA boundaries for PMD mappings In the ->huge_fault handler do not install a PMD huge page mapping if the huge page exceeds the boundaries of the VMA. All other ->huge_fault handlers have similar checks and the resulting mapping will trigger a VM_BUG_ON_VMA() if it ever reaches copy_pmd_range().
Title drm/shmem_helper: Check VMA boundaries for PMD mappings
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-27T05:02:02.758Z

Reserved: 2026-08-26T14:34:25.769Z

Link: CVE-2026-80582

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-26T15:17:14.337

Modified: 2026-08-27T06:17:44.570

Link: CVE-2026-80582

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-26T00:00:00Z

Links: CVE-2026-80582 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T17:45:04Z

Weaknesses