CVE-2026-80676
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus accessing the driver_override field without a lock, which can cause a UAF. Fix this by using the driver-core driver_override infrastructure taking care of proper locking internally. Note that calling match() from __driver_attach() without the device lock held is intentional. [1]
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedAug 28, 2026
First seenAug 28, 2026
How to fix
Update
- Linux Linuxa1656234a4a2dc6e975546867887c5f63e4a90f0, d1cb12ae81d2f7a58b0b1cfb51862afca98e6058, 0e2f0833556c8c5269deb457b89d538644a3b747, 2fb010ea7ca98cd09a6d365260b769f627e73a76, 331d8900121a1d74ecd45cd2db742ddcb5a0a565 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | d765edbb301c0e196015a59b17420558088ea33f ≤ v < a1656234a4a2dc6e975546867887c5f63e4a90f0, d765edbb301c0e196015a59b17420558088ea33f ≤ v < d1cb12ae81d2f7a58b0b1cfb51862afca98e6058, d765edbb301c0e196015a59b17420558088ea33f ≤ v < 0e2f0833556c8c5269deb457b89d538644a3b747, d765edbb301c0e196015a59b17420558088ea33f ≤ v < 2fb010ea7ca98cd09a6d365260b769f627e73a76, d765edbb301c0e196015a59b17420558088ea33f ≤ v < 331d8900121a1d74ecd45cd2db742ddcb5a0a565, 4.20 | a1656234a4a2dc6e975546867887c5f63e4a90f0, d1cb12ae81d2f7a58b0b1cfb51862afca98e6058, 0e2f0833556c8c5269deb457b89d538644a3b747, 2fb010ea7ca98cd09a6d365260b769f627e73a76, 331d8900121a1d74ecd45cd2db742ddcb5a0a565 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.