CVE-2026-80655

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event registration The zynqmp_power driver registers handlers for suspend and subsystem restart events using register_event(). However, the work structures (zynqmp_pm_init_suspend_work and zynqmp_pm_init_restart_work) used by these handlers were allocated and initialized after the registration call. This created a race window where, if the firmware triggered an event immediately after registration but before allocation, the callback (suspend_event_callback or subsystem_restart_event_callback) would dereference a NULL pointer in work_pending(), leading to a crash. Fix this by allocating and initializing the work structures before registering the events.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 28, 2026
First seenAug 28, 2026

How to fix

Update
  • Linux Linux07ea9081b8fefb99e2f427e0f0602a5e576cb120, e124f7b170337563d78a7a6aa152c897d229bc39, d349aa118ff5e4cab88424ce1b16e08edd70f8bb, fb445935338405110baca8f541a2df3b4cb8d712 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxfcf544ac64397776a18246eba5a8ca72a47c4405 ≤ v < 07ea9081b8fefb99e2f427e0f0602a5e576cb120, fcf544ac64397776a18246eba5a8ca72a47c4405 ≤ v < e124f7b170337563d78a7a6aa152c897d229bc39, fcf544ac64397776a18246eba5a8ca72a47c4405 ≤ v < d349aa118ff5e4cab88424ce1b16e08edd70f8bb, fcf544ac64397776a18246eba5a8ca72a47c4405 ≤ v < fb445935338405110baca8f541a2df3b4cb8d712, 6.1107ea9081b8fefb99e2f427e0f0602a5e576cb120, e124f7b170337563d78a7a6aa152c897d229bc39, d349aa118ff5e4cab88424ce1b16e08edd70f8bb, fb445935338405110baca8f541a2df3b4cb8d712

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-80655 · Linux · Dark Radar