In the Linux kernel, the following vulnerability has been resolved:

mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE

pte_pfn() and pte_dirty() have undefined behaviour when called on a
non-present PTE. In migrate_vma_collect_pmd(), these functions may be
invoked on non-present entries (e.g., device-private entries), leading
to potential crashes from pte_pfn() or incorrect dirty folio accounting
from pte_dirty(). Fix both by guarding with pte_present() checks.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00172.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
6c287605fd56466e645693eff3ae7c08fba56e0a affected < 26f9ca8ed42cba25d2c75daff13561cce6019395
6c287605fd56466e645693eff3ae7c08fba56e0a affected < 5b948706f11a950bc73c5304630d0a7eafc40daf
6c287605fd56466e645693eff3ae7c08fba56e0a affected < 86d55447de3738620b9a8272ff167ce97e7f7203
6c287605fd56466e645693eff3ae7c08fba56e0a affected < 2be94d6b20789b8865b1864dae5fe458ca85e019
6c287605fd56466e645693eff3ae7c08fba56e0a affected < 42f30fa5481a1f90571ccdfbb20d2e25e47ae76e
6c287605fd56466e645693eff3ae7c08fba56e0a affected < 63867c82d0c0c2d182016a32b1cc0103116b0ea5
Linux Linux affected
Version Status Constraints
5.19 affected —
0 unaffected < 5.19
6.1.184 unaffected ≤ 6.1.*
6.6.153 unaffected ≤ 6.6.*
6.12.103 unaffected ≤ 6.12.*
6.18.44 unaffected ≤ 6.18.*
7.1.8 unaffected ≤ 7.1.*
7.2 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/26f9ca8ed42cba25d2c75daff13561cce6019395 cve-icon cve-icon
https://git.kernel.org/stable/c/2be94d6b20789b8865b1864dae5fe458ca85e019 cve-icon cve-icon
https://git.kernel.org/stable/c/42f30fa5481a1f90571ccdfbb20d2e25e47ae76e cve-icon cve-icon
https://git.kernel.org/stable/c/5b948706f11a950bc73c5304630d0a7eafc40daf cve-icon cve-icon
https://git.kernel.org/stable/c/63867c82d0c0c2d182016a32b1cc0103116b0ea5 cve-icon cve-icon
https://git.kernel.org/stable/c/86d55447de3738620b9a8272ff167ce97e7f7203 cve-icon cve-icon
History

Fri, 28 Aug 2026 10:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476
CWE-665

Fri, 28 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE pte_pfn() and pte_dirty() have undefined behaviour when called on a non-present PTE. In migrate_vma_collect_pmd(), these functions may be invoked on non-present entries (e.g., device-private entries), leading to potential crashes from pte_pfn() or incorrect dirty folio accounting from pte_dirty(). Fix both by guarding with pte_present() checks.
Title mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-28T06:52:51.924Z

Reserved: 2026-08-26T14:34:25.784Z

Link: CVE-2026-80686

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-28T08:16:54.067

Modified: 2026-08-28T08:16:54.067

Link: CVE-2026-80686

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T12:45:02Z

Weaknesses