CVE-2026-80741
CVE-2026-80741
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message length drm_log_draw_kmsg_record() accesses s[len - 1] to strip the trailing newline, but len is unsigned int. If len is 0, the subtraction wraps to UINT_MAX, causing an out-of-bounds read. Add an early return when len is 0.
EPSS: 0.002 (9.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.
References
Frequently asked questions
- What is CVE-2026-80741?
- CVE-2026-80741 is a high-severity vulnerability. CVSS score: 7.1/10. Published 2026-09-03.
- How severe is CVE-2026-80741?
- High severity. CVSS v3 base score is 7.1 out of 10.