# kcov: fix data corruption and race conditions on PREEMPT_RT

CVE record · `CVE-2026-80916`

- **Identifiers:** `CVE-2026-80916`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 9 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 9 Sept 2026, 16:13 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `5ff3b30ab57da82d8db4f14662a2858cabfbc2c0 to before ef7048d8a614c5f5a9b20513a5428101a744514e` (git)
  - affected: `5ff3b30ab57da82d8db4f14662a2858cabfbc2c0 to before 8ed3ddf23d39bf5338406bd9f8863d44748cf6ce` (git)
  - affected: `5ff3b30ab57da82d8db4f14662a2858cabfbc2c0 to before 5dc59fc959b2b5742985d7ef24bccd1868217dc2` (git)
  - affected: `5ff3b30ab57da82d8db4f14662a2858cabfbc2c0 to before a2fb8222cde23b0001812ed3acb7c0ea36dd94e2` (git)
  - affected: `5ff3b30ab57da82d8db4f14662a2858cabfbc2c0 to before 18799e858b407bf355383c9dd6c06477aa437134` (git)
  - affected: `5ff3b30ab57da82d8db4f14662a2858cabfbc2c0 to before e11f5b48c82703242a3be7a7ae4b4940b4cb4610` (git)
  - affected: `5ff3b30ab57da82d8db4f14662a2858cabfbc2c0 to before 22670d1552fe155822b2abf91f920925f7d067b4` (git)
  - affected: `5ff3b30ab57da82d8db4f14662a2858cabfbc2c0 to before f8c9a3ec36b4ee3d4701b9be08f40e7bfbf89761` (git)
  - affected: `5ff3b30ab57da82d8db4f14662a2858cabfbc2c0 to before 2eed77fdcb0cc48e8eccb2bcd4b7f2c6d650e84c` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.8`
  - unaffected: `before 5.8` (semver)
  - unaffected: `5.10.269 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.220 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.185 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.154 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.106 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.47 to 6.18.*, inclusive` (semver)
  - unaffected: `7.1.11 to 7.1.*, inclusive` (semver)
  - unaffected: `7.2.1 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0018, the 7th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 9 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-80916](https://www.cve.org/CVERecord?id=CVE-2026-80916)
- [NVD: CVE-2026-80916](https://nvd.nist.gov/vuln/detail/CVE-2026-80916)

### References from the CNA

- <https://git.kernel.org/stable/c/ef7048d8a614c5f5a9b20513a5428101a744514e>
- <https://git.kernel.org/stable/c/8ed3ddf23d39bf5338406bd9f8863d44748cf6ce>
- <https://git.kernel.org/stable/c/5dc59fc959b2b5742985d7ef24bccd1868217dc2>
- <https://git.kernel.org/stable/c/a2fb8222cde23b0001812ed3acb7c0ea36dd94e2>
- <https://git.kernel.org/stable/c/18799e858b407bf355383c9dd6c06477aa437134>
- <https://git.kernel.org/stable/c/e11f5b48c82703242a3be7a7ae4b4940b4cb4610>
- <https://git.kernel.org/stable/c/22670d1552fe155822b2abf91f920925f7d067b4>
- <https://git.kernel.org/stable/c/f8c9a3ec36b4ee3d4701b9be08f40e7bfbf89761>
- <https://git.kernel.org/stable/c/2eed77fdcb0cc48e8eccb2bcd4b7f2c6d650e84c>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-80916>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-80916/>. Everything for agents: <https://agentprime.io/llms.txt>.