CVE-2026-80616

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-80616", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-26T14:34:25.774Z", "datePublished": "2026-08-28T06:48:36.911Z", "dateUpdated": "2026-10-30T12:30:43.551Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:30:43.551Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()\n\nIt's pointless to call WARN_ON() in case of an allocation failure in\ndev_change_net_namespace() and device_rename(), since it only leads to\nuseless splats caused by deliberate fault injections, so avoid it.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/ieee802154/core.c"], "versions": [{"version": "66e5c2672cd11b9310008099faf6a4ffb9dfb6d0", "lessThan": "6ff703da843d665ce7fc3fe5c202cf8121cc2a1f", "status": "affected", "versionType": "git"}, {"version": "66e5c2672cd11b9310008099faf6a4ffb9dfb6d0", "lessThan": "c67e70202cfd602f86d3e59fe6fffecaf4110f40", "status": "affected", "versionType": "git"}, {"version": "66e5c2672cd11b9310008099faf6a4ffb9dfb6d0", "lessThan": "f300e68014cf10af9aa0c0ad958750a8509c8e44", "status": "affected", "versionType": "git"}, {"version": "66e5c2672cd11b9310008099faf6a4ffb9dfb6d0", "lessThan": "f4860dd988b1041d70595f2ed84de80f90cb7ebc", "status": "affected", "versionType": "git"}, {"version": "66e5c2672cd11b9310008099faf6a4ffb9dfb6d0", "lessThan": "6fcba77571c53f656a2f109259601a7570d4c74a", "status": "affected", "versionType": "git"}, {"version": "66e5c2672cd11b9310008099faf6a4ffb9dfb6d0", "lessThan": "0569f67ed6a7af838e2141da93c68e6b6013f483", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/ieee802154/core.c"], "versions": [{"version": "4.8", "status": "affected"}, {"version": "0", "lessThan": "4.8", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.114", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "6.12.114"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.8", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/6ff703da843d665ce7fc3fe5c202cf8121cc2a1f"}, {"url": "https://git.kernel.org/stable/c/c67e70202cfd602f86d3e59fe6fffecaf4110f40"}, {"url": "https://git.kernel.org/stable/c/f300e68014cf10af9aa0c0ad958750a8509c8e44"}, {"url": "https://git.kernel.org/stable/c/f4860dd988b1041d70595f2ed84de80f90cb7ebc"}, {"url": "https://git.kernel.org/stable/c/6fcba77571c53f656a2f109259601a7570d4c74a"}, {"url": "https://git.kernel.org/stable/c/0569f67ed6a7af838e2141da93c68e6b6013f483"}], "title": "ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/ieee802154/core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "6ff703da843d665ce7fc3fe5c202cf8121cc2a1f", "status": "affected", "version": "66e5c2672cd11b9310008099faf6a4ffb9dfb6d0", "versionType": "git"}, {"lessThan": "c67e70202cfd602f86d3e59fe6fffecaf4110f40", "status": "affected", "version": "66e5c2672cd11b9310008099faf6a4ffb9dfb6d0", "versionType": "git"}, {"lessThan": "f300e68014cf10af9aa0c0ad958750a8509c8e44", "status": "affected", "version": "66e5c2672cd11b9310008099faf6a4ffb9dfb6d0", "versionType": "git"}, {"lessThan": "f4860dd988b1041d70595f2ed84de80f90cb7ebc", "status": "affected", "version": "66e5c2672cd11b9310008099faf6a4ffb9dfb6d0", "versionType": "git"}, {"lessThan": "6fcba77571c53f656a2f109259601a7570d4c74a", "status": "affected", "version": "66e5c2672cd11b9310008099faf6a4ffb9dfb6d0", "versionType": "git"}, {"lessThan": "0569f67ed6a7af838e2141da93c68e6b6013f483", "status": "affected", "version": "66e5c2672cd11b9310008099faf6a4ffb9dfb6d0", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/ieee802154/core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.8"}, {"lessThan": "4.8", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.114", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()\n\nIt's pointless to call WARN_ON() in case of an allocation failure in\ndev_change_net_namespace() and device_rename(), since it only leads to\nuseless splats caused by deliberate fault injections, so avoid it.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller."}], "id": "CVE-2026-80616", "lastModified": "2026-10-30T13:20:08.017", "metrics": {}, "published": "2026-08-28T08:16:45.620", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0569f67ed6a7af838e2141da93c68e6b6013f483"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6fcba77571c53f656a2f109259601a7570d4c74a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6ff703da843d665ce7fc3fe5c202cf8121cc2a1f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c67e70202cfd602f86d3e59fe6fffecaf4110f40"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f300e68014cf10af9aa0c0ad958750a8509c8e44"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f4860dd988b1041d70595f2ed84de80f90cb7ebc"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()", "id": "2525451", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525451"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-779", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()\nIt's pointless to call WARN_ON() in case of an allocation failure in\ndev_change_net_namespace() and device_rename(), since it only leads to\nuseless splats caused by deliberate fault injections, so avoid it.\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.", "A flaw was found in the Linux kernel's ieee802154 component. An unnecessary warning message (WARN_ON) can be triggered when memory allocation fails in the `cfg802154_switch_netns()` function. This can lead to diagnostic messages being logged due to deliberate fault injections, but does not pose a direct security risk such as arbitrary code execution or denial of service."], "name": "CVE-2026-80616", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-28T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-80616\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-80616\nhttps://lore.kernel.org/linux-cve-announce/2026082835-CVE-2026-80616-39d3@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[66e5c2672cd11b9310008099faf6a4ffb9dfb6d0,f4860dd988b1041d70595f2ed84de80f90cb7ebc)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[66e5c2672cd11b9310008099faf6a4ffb9dfb6d0,6fcba77571c53f656a2f109259601a7570d4c74a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[66e5c2672cd11b9310008099faf6a4ffb9dfb6d0,0569f67ed6a7af838e2141da93c68e6b6013f483)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.8"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,4.8)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.40,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.5,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-28T10:00:06.043240+00:00", "updated": "2026-09-02T05:45:04.844363+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-665", "CWE-779"]}