CVE-2026-80614

Source
https://cve.org/CVERecord?id=CVE-2026-80614
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80614.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-80614
Downstream
Published
2026-08-28T06:48:35Z
Modified
2026-10-24T02:32:25Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
net: emac: Fix NULL pointer dereference in emac_probe
Details

In the Linux kernel, the following vulnerability has been resolved:

net: emac: Fix NULL pointer dereference in emac_probe

Move devm_request_irq() after devm_platform_ioremap_resource() so that dev->emacp is mapped before the interrupt handler can fire. An early interrupt hitting emac_irq() would dereference the NULL dev->emacp and crash.

Also remove redundant error message. devm_platform_ioremap_resource() already returns an error message with dev_err_probe().

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80614.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dcc34ef7c83473222027f475014a2bf8ab798372
Fixed
90bb7164878b5e57d447f02c71c238f4f246016a
Fixed
a103cdb0681e7185d1b0a12ce6a7c5416c208ccd
Fixed
44068b6863fbda78fc810921ddf61642c377b3ca
Fixed
f623d38fe6c4e8c40b23f42cc6fe6963fa49997b

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80614.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80614.json"