PT-2026-82922

CVE-2026-80622

·

Published

2026-05-03

·

Updated

2026-10-13

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A use-after-free and race condition exists in the tlclk driver during the module cleanup process. The issue occurs because the file operations structure lacks the .owner field, potentially allowing the module to be unloaded while user-space processes are still interacting with the device. Furthermore, the tlclk cleanup() function frees alarm events memory before confirming that the switchover timer has finished and that blocked processes in the waitqueue are awakened.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
OESA-2026-3706
USN-8875-1
USN-8875-2
USN-8877-1
USN-8878-1
USN-8879-1
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
USN-8917-1
USN-8918-1
Found an issue in the description? Have something to add? Feel free to write us 👾