CVE-2026-80830

In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb_wakeup_notification() Add a spin lock to usb_wakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and could race with the hub_disconnect() function, which properly grabs this lock to protect the state of the device.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/04ab260407972e631c86f2bc576cd8e64d65b325
https://git.kernel.org/stable/c/71cfda2fdf78041a01e9d94143baa79feabbdbf6
https://git.kernel.org/stable/c/7c48aa0c1e79116b8af4b988d16ee29b427d6491
https://git.kernel.org/stable/c/960ca456faf61824b178f47967340300b24183db
https://git.kernel.org/stable/c/975ef630393c07fcbebf94f4d97043161b77a6ce
https://git.kernel.org/stable/c/a7a16167991c88016acef720927400404039d850
https://git.kernel.org/stable/c/bf2288583b4e072bdff17a233963619e4bc7a8b5
https://git.kernel.org/stable/c/d80b946804674069db7ce6657319a71cf8eeaa5a
https://git.kernel.org/stable/c/e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6

Configurations

No configuration.

History

No history.

Information

Published : 2026-09-04 16:18

Updated : 2026-09-07 15:17

NVD link : CVE-2026-80830

Mitre link : CVE-2026-80830

CVE.ORG link : CVE-2026-80830

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-80830", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4ee823b83bc9851743fab756c76b27d6a1e2472b", "lessThan": "a7a16167991c88016acef720927400404039d850", "versionType": "git"}, {"status": "affected", "version": "4ee823b83bc9851743fab756c76b27d6a1e2472b", "lessThan": "975ef630393c07fcbebf94f4d97043161b77a6ce", "versionType": "git"}, {"status": "affected", "version": "4ee823b83bc9851743fab756c76b27d6a1e2472b", "lessThan": "71cfda2fdf78041a01e9d94143baa79feabbdbf6", "versionType": "git"}, {"status": "affected", "version": "4ee823b83bc9851743fab756c76b27d6a1e2472b", "lessThan": "04ab260407972e631c86f2bc576cd8e64d65b325", "versionType": "git"}, {"status": "affected", "version": "4ee823b83bc9851743fab756c76b27d6a1e2472b", "lessThan": "bf2288583b4e072bdff17a233963619e4bc7a8b5", "versionType": "git"}, {"status": "affected", "version": "4ee823b83bc9851743fab756c76b27d6a1e2472b", "lessThan": "d80b946804674069db7ce6657319a71cf8eeaa5a", "versionType": "git"}, {"status": "affected", "version": "4ee823b83bc9851743fab756c76b27d6a1e2472b", "lessThan": "960ca456faf61824b178f47967340300b24183db", "versionType": "git"}, {"status": "affected", "version": "4ee823b83bc9851743fab756c76b27d6a1e2472b", "lessThan": "7c48aa0c1e79116b8af4b988d16ee29b427d6491", "versionType": "git"}, {"status": "affected", "version": "4ee823b83bc9851743fab756c76b27d6a1e2472b", "lessThan": "e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6", "versionType": "git"}], "programFiles": ["drivers/usb/core/hub.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.4"}, {"status": "unaffected", "version": "0", "lessThan": "3.4", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.269", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.220", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.187", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.156", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.108", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.49", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.13", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2.3", "versionType": "semver", "lessThanOrEqual": "7.2.*"}, {"status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/usb/core/hub.c"], "defaultStatus": "affected"}]}], "published": "2026-09-04T16:18:11.143", "references": [{"url": "https://git.kernel.org/stable/c/04ab260407972e631c86f2bc576cd8e64d65b325", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/71cfda2fdf78041a01e9d94143baa79feabbdbf6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/7c48aa0c1e79116b8af4b988d16ee29b427d6491", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/960ca456faf61824b178f47967340300b24183db", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/975ef630393c07fcbebf94f4d97043161b77a6ce", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a7a16167991c88016acef720927400404039d850", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/bf2288583b4e072bdff17a233963619e4bc7a8b5", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d80b946804674069db7ce6657319a71cf8eeaa5a", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: core: Add lock to usb_wakeup_notification()\n\nAdd a spin lock to usb_wakeup notification to prevent a race condition\nwith dereferencing freed memory. This could be hit by the xHCI driver as\nit calls this function from an IRQ and could race with the\nhub_disconnect() function, which properly grabs this lock to protect the\nstate of the device."}], "lastModified": "2026-09-07T15:17:33.187", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}