- —Not scoredno CVSS score yet
- 0.17%Exploitation in 30 daysEPSS · top 93% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE pte_pfn() and pte_dirty() have undefined behaviour when called on a non-present PTE. In migrate_vma_collect_pmd(), these functions may be invoked on non-present entries (e.g., device-private entries), leading to potential crashes from pte_pfn() or incorrect dirty folio accounting from pte_dirty(). Fix both by guarding with pte_present() checks.
Timeline
ID reserved
By Linux
- 2 days later
· 2 days later
Published
- 2 months later
· 2 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.17% · top 93% of all CVEs (12 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 6c287605fd56466e645693eff3ae7c08fba56e0a – < 26f9ca8ed42cba25d2c75daff13561cce6019395
- affected 6c287605fd56466e645693eff3ae7c08fba56e0a – < 5b948706f11a950bc73c5304630d0a7eafc40daf
- affected 6c287605fd56466e645693eff3ae7c08fba56e0a – < 86d55447de3738620b9a8272ff167ce97e7f7203
- affected 6c287605fd56466e645693eff3ae7c08fba56e0a – < 2be94d6b20789b8865b1864dae5fe458ca85e019
- affected 6c287605fd56466e645693eff3ae7c08fba56e0a – < 42f30fa5481a1f90571ccdfbb20d2e25e47ae76e
- affected 6c287605fd56466e645693eff3ae7c08fba56e0a – < 63867c82d0c0c2d182016a32b1cc0103116b0ea5
- affected 5.19
- unaffected < 5.19
- unaffected 6.1.184 – ≤ 6.1.*
- unaffected 6.6.153 – ≤ 6.6.*
- unaffected 6.12.103 – ≤ 6.12.*
- unaffected 6.18.44 – ≤ 6.18.*
- unaffected 7.1.8 – ≤ 7.1.*
- unaffected 7.2 – ≤ *
References
References6
- https://git.kernel.org/stable/c/26f9ca8ed42cba25d2c75daff13561cce6019395 (opens in a new tab)
- https://git.kernel.org/stable/c/5b948706f11a950bc73c5304630d0a7eafc40daf (opens in a new tab)
- https://git.kernel.org/stable/c/86d55447de3738620b9a8272ff167ce97e7f7203 (opens in a new tab)
- https://git.kernel.org/stable/c/2be94d6b20789b8865b1864dae5fe458ca85e019 (opens in a new tab)
- https://git.kernel.org/stable/c/42f30fa5481a1f90571ccdfbb20d2e25e47ae76e (opens in a new tab)
- https://git.kernel.org/stable/c/63867c82d0c0c2d182016a32b1cc0103116b0ea5 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-67562 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-80686)Record last updated .