Use-after-free in Linux kernel - CVE-2026-80947

Vulnerability details

The vulnerability allows an attacker with physical access to trigger a use-after-free.

The vulnerability exists due to a use-after-free in the rtl8xxxu RX URB workqueue teardown when a device is disconnected during active receive traffic. An attacker with physical access can disconnect the device during active receive traffic to trigger a use-after-free.

Affected software

How to mitigate CVE-2026-80947

External References

• https://git.kernel.org/stable/c/620acb1e8037b73a457dc8ef20fc23fc7adcb405
• https://git.kernel.org/stable/c/6c080026ecc17eecb103f8927c64ea73a74bb818
• https://git.kernel.org/stable/c/800d2b490a9af1e7132a3564c2ad5a81292e5b40
• https://git.kernel.org/stable/c/972ab8b9c08f3eb3fa535082de2950dd93604dfd

Related Security Bulletins

• Use-after-free in Linux kernel realtek rtl8xxxu driver