CVE-2026-80609

qede: fix out-of-bounds check for cqe->len_list[]

State: Published
Severity: 9.8 Critical
Published: Aug 28, 2026
Updated: Oct 16, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

qede: fix out-of-bounds check for cqe->len_list[]

Move index check before element access.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ecbb12caf399d7cf364b7553ed5aebeaa2f255bc to before 6d203bdd227fca1787f8a80cf84b990936633c5aAffected a778912b4a53587ea07d85526d152f85d109cbfe to before bd3a6a083b408e96437dbd86ff543ba9ec3a788bAffected f0923011c1261b33a2ac1de349256d39cb750dd0 to before e30af53dca803893a29eb3bbe0539752ba435410Affected 917a9d02182ac8b4f25eb47dc02f3ec679608c24 to before 1aacefd074b5dcc99b8dbcd73e1c963ed5010110Affected 896f1a2493b59beb2b5ccdf990503dbb16cb2256 to before b17751a2ebc4aef3ce6be6f71ee8df92bf5ddfcdAffected 896f1a2493b59beb2b5ccdf990503dbb16cb2256 to before 6d46ab395803f162cdc50e8d346e5f1a4e766771Affected 896f1a2493b59beb2b5ccdf990503dbb16cb2256 to before f9ba47fce5932c15891c89c60e76dfaca919cb8dAffected e441db07f208184e0466abf44b389a81d70c340eAffected 5.15.197 to before 5.15.212Affected 6.1.159 to before 6.1.178Affected 6.6.118 to before 6.6.145Affected 6.12.60 to before 6.12.97Affected 6.17.10 to before 6.18Affected
LinuxLinux	6.18Affected before 6.18Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

ecbb12caf399d7cf364b7553ed5aebeaa2f255bc to before 6d203bdd227fca1787f8a80cf84b990936633c5aAffected
a778912b4a53587ea07d85526d152f85d109cbfe to before bd3a6a083b408e96437dbd86ff543ba9ec3a788bAffected
f0923011c1261b33a2ac1de349256d39cb750dd0 to before e30af53dca803893a29eb3bbe0539752ba435410Affected
917a9d02182ac8b4f25eb47dc02f3ec679608c24 to before 1aacefd074b5dcc99b8dbcd73e1c963ed5010110Affected
896f1a2493b59beb2b5ccdf990503dbb16cb2256 to before b17751a2ebc4aef3ce6be6f71ee8df92bf5ddfcdAffected
896f1a2493b59beb2b5ccdf990503dbb16cb2256 to before 6d46ab395803f162cdc50e8d346e5f1a4e766771Affected
896f1a2493b59beb2b5ccdf990503dbb16cb2256 to before f9ba47fce5932c15891c89c60e76dfaca919cb8dAffected
e441db07f208184e0466abf44b389a81d70c340eAffected
5.15.197 to before 5.15.212Affected
6.1.159 to before 6.1.178Affected
6.6.118 to before 6.6.145Affected
6.12.60 to before 6.12.97Affected
6.17.10 to before 6.18Affected

LinuxLinux

6.18Affected
before 6.18Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.