CVE-2026-80830

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb_wakeup_notification() Add a spin lock to usb_wakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and could race with the hub_disconnect() function, which properly grabs this lock to protect the state of the device.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 4, 2026
First seenSep 4, 2026

How to fix

Update
  • Linux Linuxa7a16167991c88016acef720927400404039d850, 975ef630393c07fcbebf94f4d97043161b77a6ce, 71cfda2fdf78041a01e9d94143baa79feabbdbf6, 04ab260407972e631c86f2bc576cd8e64d65b325, bf2288583b4e072bdff17a233963619e4bc7a8b5, d80b946804674069db7ce6657319a71cf8eeaa5a, 960ca456faf61824b178f47967340300b24183db, 7c48aa0c1e79116b8af4b988d16ee29b427d6491, e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6 or later

Affected products

ProductAffected versionsFixed in
Linux Linux4ee823b83bc9851743fab756c76b27d6a1e2472b ≤ v < a7a16167991c88016acef720927400404039d850, 4ee823b83bc9851743fab756c76b27d6a1e2472b ≤ v < 975ef630393c07fcbebf94f4d97043161b77a6ce, 4ee823b83bc9851743fab756c76b27d6a1e2472b ≤ v < 71cfda2fdf78041a01e9d94143baa79feabbdbf6, 4ee823b83bc9851743fab756c76b27d6a1e2472b ≤ v < 04ab260407972e631c86f2bc576cd8e64d65b325, 4ee823b83bc9851743fab756c76b27d6a1e2472b ≤ v < bf2288583b4e072bdff17a233963619e4bc7a8b5, 4ee823b83bc9851743fab756c76b27d6a1e2472b ≤ v < d80b946804674069db7ce6657319a71cf8eeaa5a, 4ee823b83bc9851743fab756c76b27d6a1e2472b ≤ v < 960ca456faf61824b178f47967340300b24183db, 4ee823b83bc9851743fab756c76b27d6a1e2472b ≤ v < 7c48aa0c1e79116b8af4b988d16ee29b427d6491, 4ee823b83bc9851743fab756c76b27d6a1e2472b ≤ v < e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6, 3.4a7a16167991c88016acef720927400404039d850, 975ef630393c07fcbebf94f4d97043161b77a6ce, 71cfda2fdf78041a01e9d94143baa79feabbdbf6, 04ab260407972e631c86f2bc576cd8e64d65b325, bf2288583b4e072bdff17a233963619e4bc7a8b5, d80b946804674069db7ce6657319a71cf8eeaa5a, 960ca456faf61824b178f47967340300b24183db, 7c48aa0c1e79116b8af4b988d16ee29b427d6491, e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-80830 · Linux · Dark Radar