CVE-2026-80732

ata: pata_sl82c105: fix bridge revision use-after-free

State: Published
Severity: 7.8 High
Published: Sep 3, 2026
Updated: Sep 4, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ata: pata_sl82c105: fix bridge revision use-after-free

pci_get_slot() returns a referenced PCI device. Commit 44c10138fd4b ("PCI: Change all drivers to use pci_device->revision") replaced a configuration-space read with direct access to the cached revision field, but left that access after pci_dev_put(). The bridge may therefore be freed before its revision is read.

Read the revision before dropping the reference.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before 1268ca9418e2217f2b60705cf4a280b689b26678Affected 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before a626dfca96041842053cf2d1efceb436c4cd8dcfAffected 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before 5ef87b1b4656d675440ceab32a56e69ad958d3a1Affected 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before fa0dca89b4fb0909ffda7b9ab6051af33270f95eAffected 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before dc711fb137b33c12e6ca22b6a9c9b9f21d49e4deAffected 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before a837deeaa37cc3f0e8c4e5c096787047f272c956Affected 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before 56fd78c8c820f527f8003e379ab71004b2e79a44Affected 44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before 7700a31039cdc6715cb6cce7e7a664ee4e945f67Affected
LinuxLinux	2.6.23Affected before 2.6.23Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.152 through 6.6.Not affected 6.12.104 through 6.12.Not affected 6.18.45 through 6.18.Not affected 7.1.9 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before 1268ca9418e2217f2b60705cf4a280b689b26678Affected
44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before a626dfca96041842053cf2d1efceb436c4cd8dcfAffected
44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before 5ef87b1b4656d675440ceab32a56e69ad958d3a1Affected
44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before fa0dca89b4fb0909ffda7b9ab6051af33270f95eAffected
44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before dc711fb137b33c12e6ca22b6a9c9b9f21d49e4deAffected
44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before a837deeaa37cc3f0e8c4e5c096787047f272c956Affected
44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before 56fd78c8c820f527f8003e379ab71004b2e79a44Affected
44c10138fd4bbc4b6d6bff0873c24902f2a9da65 to before 7700a31039cdc6715cb6cce7e7a664ee4e945f67Affected

LinuxLinux

2.6.23Affected
before 2.6.23Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.152 through 6.6.*Not affected
6.12.104 through 6.12.*Not affected
6.18.45 through 6.18.*Not affected
7.1.9 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.