CVE-2026-80981
A use‑after‑free bug in the Linux kernel’s SMC LLC code lets an attacker read memory that has already been freed, which can lead to arbitrary code execution or a crash. The flaw has been fixed in newer kernel releases.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
All Linux systems running kernel versions before the fix for CVE‑2026‑80981. System administrators and users of those kernels are affected.
Real-world impact
An attacker could exploit the freed memory read to execute arbitrary code with kernel privileges or cause a denial of service by crashing the system.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability requires no authentication, no user interaction, and can compromise confidentiality, integrity, and availability of the entire system.
What to do about it
- 01Upgrade the Linux kernel to a version that includes the fix for CVE-2026-80981.
NVD-referenced vendor advisory
Timeline
- Sep 11, 2026 · 2d agoPublishedDisclosed and added to the National Vulnerability Database.
- Sep 13, 2026 · 4h agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.