{"id":"CVE-2026-80830","title":"usb: core: Add lock to usb_wakeup_notification()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: core: Add lock to usb_wakeup_notification()\n\nAdd a spin lock to usb_wakeup notification to prevent a race condition\nwith dereferencing freed memory. This could be …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < a7a16167991c88016acef720927400404039d850","Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 975ef630393c07fcbebf94f4d97043161b77a6ce","Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 71cfda2fdf78041a01e9d94143baa79feabbdbf6","Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 04ab260407972e631c86f2bc576cd8e64d65b325","Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < bf2288583b4e072bdff17a233963619e4bc7a8b5","Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < d80b946804674069db7ce6657319a71cf8eeaa5a","Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 960ca456faf61824b178f47967340300b24183db","Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 7c48aa0c1e79116b8af4b988d16ee29b427d6491","Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6","Linux 3.4"],"published":"2026-09-04","updated":"2026-10-19","sourceUpdated":"2026-10-19T08:44:22.699Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-80830","references":[{"url":"https://git.kernel.org/stable/c/a7a16167991c88016acef720927400404039d850"},{"url":"https://git.kernel.org/stable/c/975ef630393c07fcbebf94f4d97043161b77a6ce"},{"url":"https://git.kernel.org/stable/c/71cfda2fdf78041a01e9d94143baa79feabbdbf6"},{"url":"https://git.kernel.org/stable/c/04ab260407972e631c86f2bc576cd8e64d65b325"},{"url":"https://git.kernel.org/stable/c/bf2288583b4e072bdff17a233963619e4bc7a8b5"},{"url":"https://git.kernel.org/stable/c/d80b946804674069db7ce6657319a71cf8eeaa5a"},{"url":"https://git.kernel.org/stable/c/960ca456faf61824b178f47967340300b24183db"},{"url":"https://git.kernel.org/stable/c/7c48aa0c1e79116b8af4b988d16ee29b427d6491"},{"url":"https://git.kernel.org/stable/c/e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6"}],"tags":["cve.org"],"epss":0.00195,"epssPercentile":0.08589,"ingestedAt":"2026-10-19T09:16:01.501Z","slug":"CVE-2026-80830","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: core: Add lock to usb_wakeup_notification()\n\nAdd a spin lock to usb_wakeup notification to prevent a race condition\nwith dereferencing freed memory. This could be hit by the xHCI driver as\nit calls this function from an IRQ and could race with the\nhub_disconnect() function, which properly grabs this lock to protect the\nstate of the device.\n\n## Affected\n\n- `Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < a7a16167991c88016acef720927400404039d850`\n- `Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 975ef630393c07fcbebf94f4d97043161b77a6ce`\n- `Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 71cfda2fdf78041a01e9d94143baa79feabbdbf6`\n- `Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 04ab260407972e631c86f2bc576cd8e64d65b325`\n- `Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < bf2288583b4e072bdff17a233963619e4bc7a8b5`\n- `Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < d80b946804674069db7ce6657319a71cf8eeaa5a`\n- `Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 960ca456faf61824b178f47967340300b24183db`\n- `Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 7c48aa0c1e79116b8af4b988d16ee29b427d6491`\n- `Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6`\n- `Linux 3.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}