Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: s390/qeth: validate user buffer length in SNMP and ARP query ioctls qeth_snmp_command() and qeth_l3_arp_query() allocate a buffer sized by a user-supplied length (udata_len) without checking a lower bound, then set udata_offset to a fixed non-zero value and pass both to a reply callback. The callback bounds-checks the copy with if ((udata_len - udata_offset) < len) Both fields are u32, so a udata_len smaller than udata_offset makes the subtraction wrap and the check pass, and the following memcpy() writes past the allocation. A udata_len of 0 also yields ZERO_SIZE_PTR from kzalloc(), which the existing NULL check does not catch. Reject buffers smaller than udata_offset before allocating, so the callback subtraction can no longer underflow.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-26 | 1 | Disclosure1 |
| 2026-08-27 | 2 | General1Patch1 |
CVE-2026-80584 Linux Kernel s390/qeth Buffer Overflow in SNMP/ARP Query Ioctls https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-80584
Post summary
The entry reveals CVE‑2026‑80584, outlining a buffer overflow flaw in the Linux kernel s390/qeth SNMP/ARP ioctl interface and linking to detailed vulnerability data, but offers no PoC, exploit, patch, or evidence of active exploitation.
🚨*CVE* CVE-2026-80584 In the Linux kernel, the following vulnerability has been resolved: s390/qeth: validate user buffer length in SNMP and ARP query ioctls qeth_snmp_command() and qeth… https://www.cve.org/CVERecord?id=CVE-2026-80584 ----- Traducción: CVE-2026-80584 En … https://infoflow.cloud`
Post summary
The CVE‑2026‑80584 vulnerability in the Linux kernel’s s390/qeth module has been identified and resolved. No PoC, exploit, or active exploitation details are provided, and the text merely notes the issue has been fixed without specifying the exact patch.
CVE-2026-80584 In the Linux kernel, the following vulnerability has been resolved: s390/qeth: validate user buffer length in SNMP and ARP query ioctls qeth_snmp_command() and qeth… https://www.cve.org/CVERecord?id=CVE-2026-80584
Post summary
The note references CVE-2026-80584, a Linux kernel buffer‑length validation issue in SNMP and ARP queries, stating it has been resolved but offering no further technical or operational specifics.