CVE-2026-80724Disclosure

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclock_miscdev_mmap() rejects writable mappings of the shared vmclock ABI page with -EROFS, but leaves VM_MAYWRITE set. Userspace can map the page read-only and then upgrade it to writable with mprotect(), after which the guest can corrupt the host-written timekeeping data (sequence counter, UTC time, TSC offset) that the vmclock ABI defines as read-only. Clear VM_MAYWRITE on the read-only path so the mapping cannot be upgraded, as i915 does for its read-only objects and as fixed in drm/vc4 (CVE-2026-68445) and drm/panthor (CVE-2024-53071).

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-30: 1Patch / Workaround · 2026-08-30: 1Technical Details · 2026-08-30: 108-30
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Suruur@suruurism
    Disclosure

    First CVE: CVE-2026-80724 (CVSS 8.8) Fixed a High severity issue in Linux kernel ptp_vmclock that allowed read-only mappings to become writable. https://www.cve.org/CVERecord?id=CVE-2026-80724 @CVEnew @lostsec_ #CVE #CyberSecurity #LinuxKernel #InfoSec #AbdifatahSuruur #suruur #bugbounty

    Post summary

    The tweet announces CVE-2026-80724, a high‑severity Linux kernel flaw that permits read‑only memory mappings to be made writable, and notes that the issue has been fixed.

    0000099
    93 followersView on X

Explore more