CVE-2026-80655

soc: xilinx: Fix race condition in event registration

State
Published
Severity
Not scored
Published
Aug 28, 2026
Updated
Oct 21, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

soc: xilinx: Fix race condition in event registration

The zynqmp_power driver registers handlers for suspend and subsystem restart events using register_event(). However, the work structures (zynqmp_pm_init_suspend_work and zynqmp_pm_init_restart_work) used by these handlers were allocated and initialized after the registration call.

This created a race window where, if the firmware triggered an event immediately after registration but before allocation, the callback (suspend_event_callback or subsystem_restart_event_callback) would dereference a NULL pointer in work_pending(), leading to a crash.

Fix this by allocating and initializing the work structures before registering the events.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • fcf544ac64397776a18246eba5a8ca72a47c4405 to before 07ea9081b8fefb99e2f427e0f0602a5e576cb120Affected
  • fcf544ac64397776a18246eba5a8ca72a47c4405 to before e124f7b170337563d78a7a6aa152c897d229bc39Affected
  • fcf544ac64397776a18246eba5a8ca72a47c4405 to before d349aa118ff5e4cab88424ce1b16e08edd70f8bbAffected
  • fcf544ac64397776a18246eba5a8ca72a47c4405 to before fb445935338405110baca8f541a2df3b4cb8d712Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.