Buffer Overflow Vulnerability in Linux Kernel's QETH Component

CVE-2026-80584

What is CVE-2026-80584?

A vulnerability exists in the Linux kernel related to the QETH component, specifically within the SNMP and ARP query ioctls. It arises when user-supplied buffer lengths are allocated without proper lower bound checks. This insufficient validation can lead to a scenario where buffer underflows occur, enabling malicious actors to exploit the system through unintended memory writes. The recommended resolution includes enforcing strict validation to reject any buffer sizes smaller than necessary before allocation, thereby preventing the potential overflow and ensuring stable operations.

References