Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CVE-2026-80592

Published Aug 28, 2026

Overview

CVE-2026-80592 is a known-severity vulnerability. It was published on August 28, 2026.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

samples/damon/mtier: fail early if address range parameters are invalid

The comment on top of `struct damon_region` clearly says that

For any use case, @ar should be non-zero positive size.

which is now verified in damon_verify_new_region() if the kernel is built

with DAMON_DEBUG_SANITY.

The WARN_ONCE() can be triggered if the mtier sample module is enabled

before node{0,1}_{start,end}_addr have been properly initialized, which is

obviously not good.

------------[ cut here ]------------

start 0 >= end 0

WARNING: mm/damon/core.c:217 at damon_new_region+0xf4/0x118, CPU#59: bash/341468

Call trace:

damon_new_region+0xf4/0x118 (P)

damon_set_regions+0xfc/0x3c0

damon_sample_mtier_build_ctx+0xe8/0x3a8

damon_sample_mtier_start+0x1c/0x90

damon_sample_mtier_enable_store+0x98/0xb0

param_attr_store+0xb4/0x128

module_attr_store+0x2c/0x50

sysfs_kf_write+0x58/0x90

kernfs_fop_write_iter+0x16c/0x238

vfs

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Frequently Asked Questions

What is CVE-2026-80592?

CVE-2026-80592 is a known-severity vulnerability. It was published on August 28, 2026.

How severe is CVE-2026-80592?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2026-80592?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2026-80592?

CyberStrike's AI-powered security agents can automatically detect CVE-2026-80592 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.