High 7.8Published Sep 3, 2026

CVE-2026-80732ata: pata_sl82c105: fix bridge revision use-after-free

Updated under an hour ago (Oct 27, 2026, 12:23 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-free pci_get_slot() returns a referenced PCI device. Commit 44c10138fd4b ("PCI: Change all drivers to use pci_device->revision") replaced a configuration-space read with direct access to the cached revision field, but left that access after pci_dev_put(). The bridge may therefore be freed before its revision is read. Read the revision before dropping the reference.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Sep 4, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before 1268ca9418e2217f2b60705cf4a280b689b26678; from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before a626dfca96041842053cf2d1efceb436c4cd8dcf; 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 builds before 5ef87b1b4656d675440ceab32a56e69ad958d3a1; from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before fa0dca89b4fb0909ffda7b9ab6051af33270f95e; from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before dc711fb137b33c12e6ca22b6a9c9b9f21d49e4de; from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before a837deeaa37cc3f0e8c4e5c096787047f272c956; from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before 56fd78c8c820f527f8003e379ab71004b2e79a44; from 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 before 7700a31039cdc6715cb6cce7e7a664ee4e945f67	CNA record

References

References

https://git.kernel.org/stable/c/1268ca9418e2217f2b60705cf4a280b689b26678
https://git.kernel.org/stable/c/a626dfca96041842053cf2d1efceb436c4cd8dcf
https://git.kernel.org/stable/c/5ef87b1b4656d675440ceab32a56e69ad958d3a1
https://git.kernel.org/stable/c/fa0dca89b4fb0909ffda7b9ab6051af33270f95e
https://git.kernel.org/stable/c/dc711fb137b33c12e6ca22b6a9c9b9f21d49e4de
https://git.kernel.org/stable/c/a837deeaa37cc3f0e8c4e5c096787047f272c956
https://git.kernel.org/stable/c/56fd78c8c820f527f8003e379ab71004b2e79a44
https://git.kernel.org/stable/c/7700a31039cdc6715cb6cce7e7a664ee4e945f67

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.