CVE-2026-80830

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: core: Add lock to usb_wakeup_notification()

Add a spin lock to usb_wakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and could race with the hub_disconnect() function, which properly grabs this lock to protect the state of the device.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < a7a16167991c88016acef720927400404039d850; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < 975ef630393c07fcbebf94f4d97043161b77a6ce; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < 71cfda2fdf78041a01e9d94143baa79feabbdbf6; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < 04ab260407972e631c86f2bc576cd8e64d65b325; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < bf2288583b4e072bdff17a233963619e4bc7a8b5; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < d80b946804674069db7ce6657319a71cf8eeaa5a; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < 960ca456faf61824b178f47967340300b24183db; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < 7c48aa0c1e79116b8af4b988d16ee29b427d6491; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6
LinuxLinux3.4

References

Timeline

Published
Sep 4, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-80831In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxs_dcp_aes_bloCVE-2026-80832In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocaCVE-2026-80833In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Remove crypto_rng interface Since the crypto_rng inCVE-2026-80834In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove crypto_rng interface Since the crypto_rng inCVE-2026-80835In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove crypto_rng interface qcom-rng.c exposes the CVE-2026-80836In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - bound the akcipher result length virtio_crypto_dataq_CVE-2026-80837In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't queue packet path object notifications AllCVE-2026-80838In the Linux kernel, the following vulnerability has been resolved: vxlan: keep the last remote linked during FDB flush A non-nexthop FDB CVE-2026-80839In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject unrepresentable multicast TVLV offsets The network CVE-2026-80845.5A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eCVE-2026-80840In the Linux kernel, the following vulnerability has been resolved: ipv6: seg6: clear IPv4 control block on IPIP decapsulation End.DX4 andCVE-2026-80841In the Linux kernel, the following vulnerability has been resolved: net/packet: defer vmalloc TX_RING free until skbs finish AF_PACKET TX_
CVE-2026-80830: Unscored | Vulnix