CVE-2026-80655soc: xilinx: Fix race condition in event registration
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event registration The zynqmp_power driver registers handlers for suspend and subsystem restart events using register_event(). However, the work structures (zynqmp_pm_init_suspend_work and zynqmp_pm_init_restart_work) used by these handlers were allocated and initialized after the registration call. This created a race window where, if the firmware triggered an event immediately after registration but before allocation, the callback (suspend_event_callback or subsystem_restart_event_callback) would dereference a NULL pointer in work_pending(), leading to a crash. Fix this by allocating and initializing the work structures before registering the events.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from fcf544ac64397776a18246eba5a8ca72a47c4405 before e124f7b170337563d78a7a6aa152c897d229bc39; from fcf544ac64397776a18246eba5a8ca72a47c4405 before d349aa118ff5e4cab88424ce1b16e08edd70f8bb; from fcf544ac64397776a18246eba5a8ca72a47c4405 before fb445935338405110baca8f541a2df3b4cb8d712 | CNA record |
References
- https://git.kernel.org/stable/c/e124f7b170337563d78a7a6aa152c897d229bc39
- https://git.kernel.org/stable/c/d349aa118ff5e4cab88424ce1b16e08edd70f8bb
- https://git.kernel.org/stable/c/fb445935338405110baca8f541a2df3b4cb8d712
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.