CVE-2026-80867 alpha/PCI: Add security_locked_down() check to pci_mmap_resource()
Local attackers can bypass kernel lockdown restrictions on Alpha architecture to access PCI BARs, potentially enabling DMA attacks.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-80867?
CVE-2026-80867 is a vulnerability in Linux, published on 4 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
alpha/PCI: Add security_locked_down() check to pci_mmap_resource()
Currently, Alpha's pci_mmap_resource() does not check security_locked_down(LOCKDOWN_PCI_ACCESS) before allowing userspace to mmap PCI BARs.
The generic version has had this check since commit eb627e17727e ("PCI: Lock down BAR access when the kernel is locked down") to prevent DMA attacks when the kernel is locked down.
Add the same check to Alpha's pci_mmap_resource().
Which versions are affected by CVE-2026-80867?
How do I fix CVE-2026-80867?
Apply the vendor's patch.
Is CVE-2026-80867 being exploited?
There is no known exploitation of CVE-2026-80867 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-80867, DEBIAN-CVE-2026-80867, GHSA-6r46-6gmq-67cv, UBUNTU-CVE-2026-80867.