« Volver al listado

CVE-2026-80743

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

The irq handlers take a struct device pointer and call dev_get_drvdata() to obtain the driver data. However, the driver data is only set at the end of probe, after devm_request_irq(), so an interrupt taken in between causes the handlers to pass a NULL pointer to readl() and crash.

Pass the private data directly as the devm_request_irq() argument instead of the device pointer, matching what the handlers expect.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-80743",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
              "lessThan": "7d857aec162fb02d10ce326aecc1ac7509c31f43",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
              "lessThan": "a85315f2eb06adc5597a7103e1910fc7d0d35ffd",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
              "lessThan": "721cfeb0b9572084435695ae535411b921d1ea68",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
              "lessThan": "b4ef887bee4d3c177adac5d1eab8b2de31b08ac3",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
              "lessThan": "0d58a70b6dc7b65772e3ef7c43beb91882cf9ed5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
              "lessThan": "f51a540b14eecb8667bbe450192318271b87631e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
              "lessThan": "09e4c486348e176c083f8bee9169ae8f408cf8d1",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "6f6c3c36f0917be24587eeba818ab4fdfcb5465a",
              "lessThan": "f12afefb7b01f94d6d66d397f323a9914edbf70e",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "sound/soc/xilinx/xlnx_formatter_pcm.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.1"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.1",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.266",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.217",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.184",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.153",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.105",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.46",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.1.10",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.*"
            },
            {
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "sound/soc/xilinx/xlnx_formatter_pcm.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-03T13:06:13.590",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/09e4c486348e176c083f8bee9169ae8f408cf8d1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/0d58a70b6dc7b65772e3ef7c43beb91882cf9ed5",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/721cfeb0b9572084435695ae535411b921d1ea68",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/7d857aec162fb02d10ce326aecc1ac7509c31f43",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a85315f2eb06adc5597a7103e1910fc7d0d35ffd",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b4ef887bee4d3c177adac5d1eab8b2de31b08ac3",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f12afefb7b01f94d6d66d397f323a9914edbf70e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f51a540b14eecb8667bbe450192318271b87631e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers\n\nThe irq handlers take a struct device pointer and call\ndev_get_drvdata() to obtain the driver data.  However, the driver\ndata is only set at the end of probe, after devm_request_irq(),\nso an interrupt taken in between causes the handlers to pass a\nNULL pointer to readl() and crash.\n\nPass the private data directly as the devm_request_irq() argument\ninstead of the device pointer, matching what the handlers expect."
    }
  ],
  "lastModified": "2026-09-03T13:06:13.590",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}