CVE-2026-80660

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A circular locking dependency exists in the hwmon (occ) component. The functions occ active(false) and occ shutdown() unregister sysfs-backed devices while holding the occ->lock. Because hwmon device unregister() and sysfs remove group() may wait for active sysfs callbacks to drain, and those callbacks can enter the OCC update path and attempt to acquire occ->lock, a deadlock occurs. This creates a conflict where the unregister path follows the order occ->lock to sysfs callback drain, while a callback follows the order sysfs callback to occ->lock.

Recommendations Serialize hwmon registration and removal using a separate hwmon lock. Detach occ->hwmon and update occ->active while occ->lock is held, then release occ->lock before calling hwmon device unregister(). Remove the driver sysfs group before acquiring occ->lock in occ shutdown(). Additionally, configure OCC update callbacks to return -ENODEV after deactivation to prevent hardware polling after the hwmon device has been detached.