Use-After-Free Vulnerability in Linux Kernel Affects PATA Driver

CVE-2026-80732

What is CVE-2026-80732?

A use-after-free vulnerability exists in the PATA driver of the Linux kernel due to improper handling of the PCI device's revision information. In particular, after a reference to a PCI device is obtained, the revision was accessed without ensuring that the device remained allocated. This oversight can lead to potential exploit scenarios where an attacker might manipulate memory access patterns, thereby jeopardizing system stability and security. It is crucial for developers and system administrators to apply the necessary patches to safeguard against exploitation.

References