In the Linux kernel, the following vulnerability has been resolved:

usb: core: Add lock to usb_wakeup_notification()

Add a spin lock to usb_wakeup notification to prevent a race condition
with dereferencing freed memory. This could be hit by the xHCI driver as
it calls this function from an IRQ and could race with the
hub_disconnect() function, which properly grabs this lock to protect the
state of the device.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00195.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
4ee823b83bc9851743fab756c76b27d6a1e2472b affected < a7a16167991c88016acef720927400404039d850
4ee823b83bc9851743fab756c76b27d6a1e2472b affected < 975ef630393c07fcbebf94f4d97043161b77a6ce
4ee823b83bc9851743fab756c76b27d6a1e2472b affected < 71cfda2fdf78041a01e9d94143baa79feabbdbf6
4ee823b83bc9851743fab756c76b27d6a1e2472b affected < 04ab260407972e631c86f2bc576cd8e64d65b325
4ee823b83bc9851743fab756c76b27d6a1e2472b affected < bf2288583b4e072bdff17a233963619e4bc7a8b5
4ee823b83bc9851743fab756c76b27d6a1e2472b affected < d80b946804674069db7ce6657319a71cf8eeaa5a
4ee823b83bc9851743fab756c76b27d6a1e2472b affected < 960ca456faf61824b178f47967340300b24183db
4ee823b83bc9851743fab756c76b27d6a1e2472b affected < 7c48aa0c1e79116b8af4b988d16ee29b427d6491
4ee823b83bc9851743fab756c76b27d6a1e2472b affected < e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6
Linux Linux affected
Version Status Constraints
3.4 affected —
0 unaffected < 3.4
5.10.269 unaffected ≤ 5.10.*
5.15.220 unaffected ≤ 5.15.*
6.1.187 unaffected ≤ 6.1.*
6.6.156 unaffected ≤ 6.6.*
6.12.108 unaffected ≤ 6.12.*
6.18.49 unaffected ≤ 6.18.*
7.1.13 unaffected ≤ 7.1.*
7.2.3 unaffected ≤ 7.2.*
7.3-rc1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-4777-1 linux security update
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/04ab260407972e631c86f2bc576cd8e64d65b325 cve-icon cve-icon
https://git.kernel.org/stable/c/71cfda2fdf78041a01e9d94143baa79feabbdbf6 cve-icon cve-icon
https://git.kernel.org/stable/c/7c48aa0c1e79116b8af4b988d16ee29b427d6491 cve-icon cve-icon
https://git.kernel.org/stable/c/960ca456faf61824b178f47967340300b24183db cve-icon cve-icon
https://git.kernel.org/stable/c/975ef630393c07fcbebf94f4d97043161b77a6ce cve-icon cve-icon
https://git.kernel.org/stable/c/a7a16167991c88016acef720927400404039d850 cve-icon cve-icon
https://git.kernel.org/stable/c/bf2288583b4e072bdff17a233963619e4bc7a8b5 cve-icon cve-icon
https://git.kernel.org/stable/c/d80b946804674069db7ce6657319a71cf8eeaa5a cve-icon cve-icon
https://git.kernel.org/stable/c/e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6 cve-icon cve-icon
History

Fri, 04 Sep 2026 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362
CWE-416

Fri, 04 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb_wakeup_notification() Add a spin lock to usb_wakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and could race with the hub_disconnect() function, which properly grabs this lock to protect the state of the device.
Title usb: core: Add lock to usb_wakeup_notification()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-07T14:21:22.046Z

Reserved: 2026-08-26T14:34:25.796Z

Link: CVE-2026-80830

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-04T16:18:11.143

Modified: 2026-09-07T15:17:33.187

Link: CVE-2026-80830

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-05T04:30:18Z

Weaknesses