CVE-2026-80676
Last modified
CVE-2026-80676 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus accessing the driver_override field without a lock, which can cause a UAF. Fix this by using the driver-core driver_override infrastructure taking care of proper locking internally. Note that calling match() from __driver_attach() without the device lock held is intentional. [1].
Description
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus accessing the driver_override field without a lock, which can cause a UAF. Fix this by using the driver-core driver_override infrastructure taking care of proper locking internally. Note that calling match() from __driver_attach() without the device lock held is intentional. [1]
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= d765edbb301c0e196015a59b17420558088ea33f, < d1cb12ae81d2f7a58b0b1cfb51862afca98e6058; >= d765edbb301c0e196015a59b17420558088ea33f, < 0e2f0833556c8c5269deb457b89d538644a3b747; >= d765edbb301c0e196015a59b17420558088ea33f, < 2fb010ea7ca98cd09a6d365260b769f627e73a76; >= d765edbb301c0e196015a59b17420558088ea33f, < 331d8900121a1d74ecd45cd2db742ddcb5a0a565 |
| Linux | Linux | 4.20 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-80676?
How severe is CVE-2026-80676?
How do I fix CVE-2026-80676?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-80670In the Linux kernel, the following vulnerability has been re…9.1
- CVE-2026-80671In the Linux kernel, the following vulnerability has been re…9.3
- CVE-2026-80672In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-80673In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-80674In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-80675In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-80677In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-80678In the Linux kernel, the following vulnerability has been re…8.4
- CVE-2026-80679In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80680In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-80681In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-80682In the Linux kernel, the following vulnerability has been re…7.8
Are you affected by CVE-2026-80676?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST