CVE-2026-80830None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb_wakeup_notification() Add a spin lock to usb_wakeup notification to prevent a race condition with dereferencing freed memory. This could be …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
usb: core: Add lock to usb_wakeup_notification()
Add a spin lock to usb_wakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and could race with the hub_disconnect() function, which properly grabs this lock to protect the state of the device.
Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < a7a16167991c88016acef720927400404039d850Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 975ef630393c07fcbebf94f4d97043161b77a6ceLinux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 71cfda2fdf78041a01e9d94143baa79feabbdbf6Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 04ab260407972e631c86f2bc576cd8e64d65b325Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < bf2288583b4e072bdff17a233963619e4bc7a8b5Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < d80b946804674069db7ce6657319a71cf8eeaa5aLinux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 960ca456faf61824b178f47967340300b24183dbLinux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < 7c48aa0c1e79116b8af4b988d16ee29b427d6491Linux >= 4ee823b83bc9851743fab756c76b27d6a1e2472b < e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6Linux 3.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98770Noneusb: gadget: midi2: Fix the jack descriptor array sizes
CVE-2026-98769Noneusb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
CVE-2026-98774Nonerust_binder: cancel deferred work items in thread exit
CVE-2026-98772NoneUSB: serial: fix port tear down use-after-free
CVE-2026-98771Noneusb: storage: sierra_ms: reject short SWoC info transfers
CVE-2026-98776Nonebinderfs: fix UAF write in binder_add_device