{"id":"CVE-2026-80830","summary":"usb: core: Add lock to usb_wakeup_notification()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: core: Add lock to usb_wakeup_notification()\n\nAdd a spin lock to usb_wakeup notification to prevent a race condition\nwith dereferencing freed memory. This could be hit by the xHCI driver as\nit calls this function from an IRQ and could race with the\nhub_disconnect() function, which properly grabs this lock to protect the\nstate of the device.","modified":"2026-09-15T18:26:42.882422094Z","published":"2026-09-04T15:54:35.169Z","related":["openSUSE-SU-2026:11773-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80830.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/04ab260407972e631c86f2bc576cd8e64d65b325"},{"type":"WEB","url":"https://git.kernel.org/stable/c/71cfda2fdf78041a01e9d94143baa79feabbdbf6"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7c48aa0c1e79116b8af4b988d16ee29b427d6491"},{"type":"WEB","url":"https://git.kernel.org/stable/c/960ca456faf61824b178f47967340300b24183db"},{"type":"WEB","url":"https://git.kernel.org/stable/c/975ef630393c07fcbebf94f4d97043161b77a6ce"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a7a16167991c88016acef720927400404039d850"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bf2288583b4e072bdff17a233963619e4bc7a8b5"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d80b946804674069db7ce6657319a71cf8eeaa5a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80830.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80830"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"4ee823b83bc9851743fab756c76b27d6a1e2472b"},{"fixed":"a7a16167991c88016acef720927400404039d850"},{"fixed":"975ef630393c07fcbebf94f4d97043161b77a6ce"},{"fixed":"71cfda2fdf78041a01e9d94143baa79feabbdbf6"},{"fixed":"04ab260407972e631c86f2bc576cd8e64d65b325"},{"fixed":"bf2288583b4e072bdff17a233963619e4bc7a8b5"},{"fixed":"d80b946804674069db7ce6657319a71cf8eeaa5a"},{"fixed":"960ca456faf61824b178f47967340300b24183db"},{"fixed":"7c48aa0c1e79116b8af4b988d16ee29b427d6491"},{"fixed":"e263e18a9e7b1ff3e7301f0801c6ff87c31adfb6"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80830.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.4.0"},{"fixed":"5.10.269"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.220"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.187"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.156"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.108"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.49"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.13"}]},{"type":"ECOSYSTEM","events":[{"introduced":"7.2.0"},{"fixed":"7.2.3"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80830.json"}}],"schema_version":"1.9.0"}