THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-80631 (HIGH 7.5) — In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzo_decompress_bio() validates each on-disk segment length seg_len only against the workspace cbuf size, not against the compressed inpu

[NVD] CVE-2026-80631 (HIGH 7.5) — In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzo_decompress_bio() validates each on-disk segment length seg_len only against the workspace cbuf size, not against the compressed inpu

mednvdPublished 2026-08-28

CVE-2026-80631 CVSS: 7.5 HIGH Published: 2026-08-28T08:16:48.010

In the Linux kernel, the following vulnerability has been resolved:

btrfs: lzo: reject compressed segment that overflows the compressed input

lzo_decompress_bio() validates each on-disk segment length seg_len only against the workspace cbuf size, not against the compressed input size (compressed_len, the total folio bytes of the b

MITRE ATT&CK techniques

CompressionT1027.015

Indicators of compromise

CVE-2026-80631cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80631