CVE-2026-80677

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the driver core where the dev has sync state() function reads the dev->driver variable twice without holding the device lock(). This occurs during a NULL check and the subsequent dereference of ->sync state. Because some callers only hold the device links write lock, a concurrent unbind operation can clear dev->driver via the device unbind cleanup() function, potentially leading to a crash or unstable behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.