CVE-2026-80830 PUBLISHED

usb: core: Add lock to usb_wakeup_notification()

Assigner: Linux
Reserved: 26.08.2026 Published: 04.09.2026 Updated: 04.09.2026

In the Linux kernel, the following vulnerability has been resolved:

usb: core: Add lock to usb_wakeup_notification()

Add a spin lock to usb_wakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and could race with the hub_disconnect() function, which properly grabs this lock to protect the state of the device.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to a7a16167991c88016acef720927400404039d850 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 975ef630393c07fcbebf94f4d97043161b77a6ce (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 71cfda2fdf78041a01e9d94143baa79feabbdbf6 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 04ab260407972e631c86f2bc576cd8e64d65b325 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to bf2288583b4e072bdff17a233963619e4bc7a8b5 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to d80b946804674069db7ce6657319a71cf8eeaa5a (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 960ca456faf61824b178f47967340300b24183db (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 7c48aa0c1e79116b8af4b988d16ee29b427d6491 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6 (excl.)
  • affected from 0 to 5.10.269 (excl.)
  • affected from 0 to 5.15.220 (excl.)
  • affected from 0 to 6.1.187 (excl.)
  • affected from 0 to 6.6.156 (excl.)
  • affected from 0 to 6.12.108 (excl.)
  • affected from 0 to 6.18.49 (excl.)
  • affected from 0 to 7.1.13 (excl.)
  • affected from 0 to 7.2.3 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • unaffected from 5.10.269 to 5.10.* (incl.)
  • unaffected from 5.15.220 to 5.15.* (incl.)
  • unaffected from 6.1.187 to 6.1.* (incl.)
  • unaffected from 6.6.156 to 6.6.* (incl.)
  • unaffected from 6.12.108 to 6.12.* (incl.)
  • unaffected from 6.18.49 to 6.18.* (incl.)
  • unaffected from 7.1.13 to 7.1.* (incl.)
  • unaffected from 7.2.3 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References