Strix
63.3K

CVE-2026-80830

UnknownEPSS 0.19%

Last modified

CVE-2026-80830 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb_wakeup_notification() Add a spin lock to usb_wakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and could race with the hub_disconnect() function, which properly grabs this lock to protect the state of the device.. EPSS estimates a 0.19% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb_wakeup_notification() Add a spin lock to usb_wakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and could race with the hub_disconnect() function, which properly grabs this lock to protect the state of the device.

Metrics

EPSS Probability
0.19%

9.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < a7a16167991c88016acef720927400404039d850; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < 975ef630393c07fcbebf94f4d97043161b77a6ce; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < 71cfda2fdf78041a01e9d94143baa79feabbdbf6; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < 04ab260407972e631c86f2bc576cd8e64d65b325; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < bf2288583b4e072bdff17a233963619e4bc7a8b5; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < d80b946804674069db7ce6657319a71cf8eeaa5a; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < 960ca456faf61824b178f47967340300b24183db; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < 7c48aa0c1e79116b8af4b988d16ee29b427d6491; >= 4ee823b83bc9851743fab756c76b27d6a1e2472b, < e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6
LinuxLinux3.4

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-80830?
In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb_wakeup_notification() Add a spin lock to usb_wakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and could race with the hub_disconnect() function, which properly grabs this lock to protect the state of the device.
How severe is CVE-2026-80830?
Severity scoring for CVE-2026-80830 is pending analysis. The EPSS model estimates a 0.19% probability of exploitation in the next 30 days.
How do I fix CVE-2026-80830?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-80830?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST