CVE-2026-80830

CVE-2026-80830

published September 4, 2026

CVSS
—
EPSS
0%
Percentile
8.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: core: Add lock to usb_wakeup_notification()

Add a spin lock to usb_wakeup notification to prevent a race condition

with dereferencing freed memory. This could be hit by the xHCI driver as

it calls this function from an IRQ and could race with the

hub_disconnect() function, which properly grabs this lock to protect the

state of the device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00195 · 8.7th percentile
Published
2026-09-04T20:18Z
References (9)
EPSS history
Timeline
  • 06 SEP 03:33Z
    EPSS moved — → 0%
    epss
  • 04 SEP 15:54Z
    usb: core: Add lock to usb_wakeup_notification()
    cvelistv5