CVE-2026-80830

Summary

In the Linux kernel, the following vulnerability has been resolved:

usb: core: Add lock to usb_wakeup_notification()

Add a spin lock to usb_wakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and could race with the hub_disconnect() function, which properly grabs this lock to protect the state of the device.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a7a16167991c88016acef720927400404039d850affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 975ef630393c07fcbebf94f4d97043161b77a6ceaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 71cfda2fdf78041a01e9d94143baa79feabbdbf6affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 04ab260407972e631c86f2bc576cd8e64d65b325affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < bf2288583b4e072bdff17a233963619e4bc7a8b5affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d80b946804674069db7ce6657319a71cf8eeaa5aaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 960ca456faf61824b178f47967340300b24183dbaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 7c48aa0c1e79116b8af4b988d16ee29b427d6491affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6affected
LinuxLinux0 < 5.10.269affected
LinuxLinux0 < 5.15.220affected
LinuxLinux0 < 6.1.187affected
LinuxLinux0 < 6.6.156affected
LinuxLinux0 < 6.12.108affected
LinuxLinux0 < 6.18.49affected
LinuxLinux0 < 7.1.13affected
LinuxLinux0 < 7.2.3affected
LinuxLinux5.10.269 <= 5.10.*unaffected
LinuxLinux5.15.220 <= 5.15.*unaffected
LinuxLinux6.1.187 <= 6.1.*unaffected
LinuxLinux6.6.156 <= 6.6.*unaffected
LinuxLinux6.12.108 <= 6.12.*unaffected
LinuxLinux6.18.49 <= 6.18.*unaffected
LinuxLinux7.1.13 <= 7.1.*unaffected
LinuxLinux7.2.3 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References