CVE-2026-80950

CVE CVE-2026-80950EUVD EUVD-2026-76273Published 2026-09-11T19:42:20.000ZLast changed 2026-09-13T06:28:23.000ZCVSS 7.8

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Check that the transfer is valid before accessing it The Renesas I3C driver uses an asynchronous model to transfer data. It prepares a struct renesas_i3c_xfer, enqueues it, and waits for completion. The interrupt handler dequeues the transfer, updates/uses it, and signals the waiting thread. If the completion times out, the waiting thread dequeues the transfer and free it. If an interrupt fires after that, the handler may access freed memory, leading to crashes. Check that the transfer is still valid before accessing it in the interrupt handler. With it clear any status flags and disable all the interrupts to avoid triggering the same interrupts again.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

• Linux — Linux patch: 7.2.4; d028219a9f1485914492bf373406f6a0e665ace2 <5f1a76ecfe90544a28d657306c9b3caa66ba0e63; patch: 7.3-rc1; patch: 0; 6.17; patch: 6.18.50; d028219a9f1485914492bf373406f6a0e665ace2 <ec631aff93261c6d031f953549802322032f2aba; d028219a9f1485914492bf373406f6a0e665ace2 <0093f9fc102ba8b98561fdd2f8559553ef56be59

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

• Linux — Linux

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.