{"cve":"CVE-2026-80686","nvd":{"published":"2026-08-28T08:16:54.067","modified":"2026-08-28T08:16:54.067","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE\n\npte_pfn() and pte_dirty() have undefined behaviour when called on a\nnon-present PTE. In migrate_vma_collect_pmd(), these functions may be\ninvoked on non-present entries (e.g., device-private entries), leading\nto potential crashes from pte_pfn() or incorrect dirty folio accounting\nfrom pte_dirty(). Fix both by guarding with pte_present() checks.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/26f9ca8ed42cba25d2c75daff13561cce6019395","https://git.kernel.org/stable/c/2be94d6b20789b8865b1864dae5fe458ca85e019","https://git.kernel.org/stable/c/42f30fa5481a1f90571ccdfbb20d2e25e47ae76e","https://git.kernel.org/stable/c/5b948706f11a950bc73c5304630d0a7eafc40daf","https://git.kernel.org/stable/c/63867c82d0c0c2d182016a32b1cc0103116b0ea5"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:50:50.842544443+00:00"},"epss":{"cve":"CVE-2026-80686","score":0.00173,"percentile":0.06652,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}