Use-after-free in Linux kernel - CVE-2026-80676

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a use-after-free in the vmbus driver matching logic when probing a driver through __driver_attach__(). A local user can trigger access to the driver_override field without proper locking to cause a denial of service.

The issue occurs because the bus match callback can access the field without the device lock being held.

Affected software

How to mitigate CVE-2026-80676

External References

• https://git.kernel.org/stable/c/0e2f0833556c8c5269deb457b89d538644a3b747
• https://git.kernel.org/stable/c/2fb010ea7ca98cd09a6d365260b769f627e73a76
• https://git.kernel.org/stable/c/331d8900121a1d74ecd45cd2db742ddcb5a0a565
• https://git.kernel.org/stable/c/d1cb12ae81d2f7a58b0b1cfb51862afca98e6058

Related Security Bulletins

• Use-after-free in Linux kernel vmbus driver matching logic