Linux Kernel Vulnerability Affects Data Length Reporting

CVE-2026-80876

What is CVE-2026-80876?

This vulnerability in the Linux kernel involves incorrect reporting of data lengths for small events when RB_FORCE_8BYTE_ALIGNMENT is enabled. Specifically, when this setting is true, the system reserves space incorrectly, causing events to report a data length that is consistently 4 bytes larger than expected under certain conditions. This has been observed in architectures like riscv64 during ftrace selftest execution, leading to unexpected behavior and log outputs. The issue requires precise handling of the event length calculations to prevent inconsistencies in data reporting.

References