CVE-2026-80694

net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller

State: Published
Severity: 9.8 Critical
Published: Aug 28, 2026
Updated: Oct 30, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller

mtk_handle_irq_rx expects a struct mtk_eth * (matching the request_irq cookie), but mtk_poll_controller incorrectly passed the net_device *. Calling ndo_poll_controller with CONFIG_NET_POLL_CONTROLLER enabled would then crash.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 to before 979a736fcac2ee32b55dafa6766188aa8b6927a4Affected 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 to before a9133c4d335e48ba92f4daed10c506378924f976Affected 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 to before 3bd58ac9ca0c552651f533c1bd280dd19ae7d4e8Affected 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 to before 276f1f180f55d56cf5992a581e20ed2b3dfa6cedAffected 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 to before 7eb46318d53940dab63dea7130e720b67a656104Affected 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 to before e095f249e2209674f6366f6db0383a2b96e19239Affected
LinuxLinux	4.8Affected before 4.8Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.103 through 6.12.Not affected 6.18.44 through 6.18.Not affected 7.1.8 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 to before 979a736fcac2ee32b55dafa6766188aa8b6927a4Affected
8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 to before a9133c4d335e48ba92f4daed10c506378924f976Affected
8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 to before 3bd58ac9ca0c552651f533c1bd280dd19ae7d4e8Affected
8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 to before 276f1f180f55d56cf5992a581e20ed2b3dfa6cedAffected
8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 to before 7eb46318d53940dab63dea7130e720b67a656104Affected
8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 to before e095f249e2209674f6366f6db0383a2b96e19239Affected

LinuxLinux

4.8Affected
before 4.8Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.103 through 6.12.*Not affected
6.18.44 through 6.18.*Not affected
7.1.8 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.