PT-2026-82922
CVE-2026-80622
·
Published
2026-05-03
·
Updated
2026-10-13
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free and race condition exists in the tlclk driver during the module cleanup process. The issue occurs because the
file operations structure lacks the .owner field, potentially allowing the module to be unloaded while user-space processes are still interacting with the device. Furthermore, the tlclk cleanup() function frees alarm events memory before confirming that the switchover timer has finished and that blocked processes in the waitqueue are awakened.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾