{"id":"CVE-2026-80609","revision":"7a553a973a75438e99cdeea610c2c09c","records":[{"revision":"7a553a973a75438e99cdeea610c2c09c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-80609","aliases":[],"title":"qede: fix out-of-bounds check for cqe->len_list[]","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nqede: fix out-of-bounds check for cqe->len_list[]\n\nMove index check before element access.","state":0,"publishedAt":"2026-08-28T06:48:32.751+00:00","modifiedAt":"2026-10-16T19:26:30.519+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/qlogic/qede/qede_fp.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"ecbb12caf399d7cf364b7553ed5aebeaa2f255bc\",\n                            \"lessThan\": \"6d203bdd227fca1787f8a80cf84b990936633c5a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a778912b4a53587ea07d85526d152f85d109cbfe\",\n                            \"lessThan\": \"bd3a6a083b408e96437dbd86ff543ba9ec3a788b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f0923011c1261b33a2ac1de349256d39cb750dd0\",\n                            \"lessThan\": \"e30af53dca803893a29eb3bbe0539752ba435410\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"917a9d02182ac8b4f25eb47dc02f3ec679608c24\",\n                            \"lessThan\": \"1aacefd074b5dcc99b8dbcd73e1c963ed5010110\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"896f1a2493b59beb2b5ccdf990503dbb16cb2256\",\n                            \"lessThan\": \"b17751a2ebc4aef3ce6be6f71ee8df92bf5ddfcd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"896f1a2493b59beb2b5ccdf990503dbb16cb2256\",\n                            \"lessThan\": \"6d46ab395803f162cdc50e8d346e5f1a4e766771\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"896f1a2493b59beb2b5ccdf990503dbb16cb2256\",\n                            \"lessThan\": \"f9ba47fce5932c15891c89c60e76dfaca919cb8d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e441db07f208184e0466abf44b389a81d70c340e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5.15.197\",\n                            \"lessThan\": \"5.15.212\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.159\",\n                            \"lessThan\": \"6.1.178\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.118\",\n                            \"lessThan\": \"6.6.145\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.60\",\n                            \"lessThan\": \"6.12.97\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.17.10\",\n                            \"lessThan\": \"6.18\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/qlogic/qede/qede_fp.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.18\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.18\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.212\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.178\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.145\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.97\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.40\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.5\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://git.kernel.org/stable/c/6d203bdd227fca1787f8a80cf84b990936633c5a","https://git.kernel.org/stable/c/bd3a6a083b408e96437dbd86ff543ba9ec3a788b","https://git.kernel.org/stable/c/e30af53dca803893a29eb3bbe0539752ba435410","https://git.kernel.org/stable/c/1aacefd074b5dcc99b8dbcd73e1c963ed5010110","https://git.kernel.org/stable/c/b17751a2ebc4aef3ce6be6f71ee8df92bf5ddfcd","https://git.kernel.org/stable/c/6d46ab395803f162cdc50e8d346e5f1a4e766771","https://git.kernel.org/stable/c/f9ba47fce5932c15891c89c60e76dfaca919cb8d"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-80609","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-80609","identifiers":["CVE-2026-80609"]},"retained":false,"historicalAffected":[]}],"coverage":[]}