SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-80830

UNKNOWN · CVSS N/A EPSS 0.19%

Source: NVD + CISA KEV + EPSS · Published 2026-09-04 · Last synced 2026-09-19

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's USB subsystem, specifically in the handling of wakeup notifications, where a race condition could lead to dereferencing freed memory. This flaw can be exploited by the xHCI driver during interrupt handling, potentially resulting in system instability or crashes. Linux system administrators and developers working with USB devices should prioritize addressing this issue to ensure system reliability and security.

CVE
CVE-2026-80830
Severity
UNKNOWN
CVSS
N/A
EPSS
0.19%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb_wakeup_notification() Add a spin lock to usb_wakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and could race with the hub_disconnect() function, which properly grabs this lock to protect the state of the device.