CVE-2026-80694

CriticalCVSS 9.8/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller

mtk_handle_irq_rx expects a struct mtk_eth * (matching the request_irq cookie), but mtk_poll_controller incorrectly passed the net_device *. Calling ndo_poll_controller with CONFIG_NET_POLL_CONTROLLER enabled would then crash.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496, < 979a736fcac2ee32b55dafa6766188aa8b6927a4; >= 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496, < a9133c4d335e48ba92f4daed10c506378924f976; >= 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496, < 3bd58ac9ca0c552651f533c1bd280dd19ae7d4e8; >= 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496, < 276f1f180f55d56cf5992a581e20ed2b3dfa6ced; >= 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496, < 7eb46318d53940dab63dea7130e720b67a656104; >= 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496, < e095f249e2209674f6366f6db0383a2b96e19239
LinuxLinux4.8

References

Timeline

Published
Aug 28, 2026
Last modified
Oct 30, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-80695In the Linux kernel, the following vulnerability has been resolved: hwmon: (sht3x) Fix unaligned accesses Sashiko reports: In sht3x_updatCVE-2026-806967.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Fix reading the minimum alarm voltage Coverity reportCVE-2026-80697In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid f_path for page cache sharing Previously, backing CVE-2026-80698In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The CVE-2026-80699In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested contextCVE-2026-80707.3Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, reCVE-2026-807007.8In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmwCVE-2026-80701In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: enforce cursor size limits for MOB cursors vmw_cursor_planCVE-2026-807027.8In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size Two siteCVE-2026-80703In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLECVE-2026-80704In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest oCVE-2026-80705In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if dml21_add_phantom_plane() is successful Veri
CVE-2026-80694: Critical severity, CVSS 9.8 | Vulnix