CVE-2026-80694Critical· 9.8▾ MidnightIn the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller mtk_handle_irq_rx expects a struct mtk_eth * (matching the request_irq cookie), but mtk_po…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.7%
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller
mtk_handle_irq_rx expects a struct mtk_eth * (matching the request_irq cookie), but mtk_poll_controller incorrectly passed the net_device *. Calling ndo_poll_controller with CONFIG_NET_POLL_CONTROLLER enabled would then crash.
Linux >= 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 < a9133c4d335e48ba92f4daed10c506378924f976Linux >= 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 < 3bd58ac9ca0c552651f533c1bd280dd19ae7d4e8Linux >= 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 < 276f1f180f55d56cf5992a581e20ed2b3dfa6cedLinux >= 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 < 7eb46318d53940dab63dea7130e720b67a656104Linux >= 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 < e095f249e2209674f6366f6db0383a2b96e19239Linux 4.8Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98869Nonebpf: Infer zext_dst based on static register liveness analysis
CVE-2023-7356NoneBluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
CVE-2026-98766Noneusb: gadget: aspeed-vhub: cancel wake work on device removal
CVE-2026-98768Medium· 4.7usb: typec: anx7411 - stop the IRQ before destroying the workqueue
CVE-2026-98767Noneusb: dwc3: gadget: fix IRQ storm on invalid event buffer count
CVE-2026-98770Noneusb: gadget: midi2: Fix the jack descriptor array sizes