In the Linux kernel, the following vulnerability has been resolved:

driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()

dev_has_sync_state() reads dev->driver twice without holding
device_lock() -- once for the NULL check and once to dereference
->sync_state. Some callers only hold device_links_write_lock, which
doesn't prevent a concurrent unbind from clearing dev->driver via
device_unbind_cleanup().

Fix it by reading dev->driver exactly once with READ_ONCE(), pairing
with the WRITE_ONCE() in device_set_driver().

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
ac338acf514e7b578fa9e3742ec2c292323b4c1a affected < 89789e4c141904506163dcb91c7289a074573931
ac338acf514e7b578fa9e3742ec2c292323b4c1a affected < 51b3e1de53ee5b7775c7ff90e67fdb2665fce938
ac338acf514e7b578fa9e3742ec2c292323b4c1a affected < 358697929351f619143f59c6a8a15a4994748b79
ac338acf514e7b578fa9e3742ec2c292323b4c1a affected < 5e79e0180515b31b2e2244dc3d256fd8b5a07021
ac338acf514e7b578fa9e3742ec2c292323b4c1a affected < 860885fcd2611bca8c28dac8b2c1c7ff160f763e
ac338acf514e7b578fa9e3742ec2c292323b4c1a affected < cc77f0d91e3214e4292208f02a1dc09a31f9aac7
ac338acf514e7b578fa9e3742ec2c292323b4c1a affected < 9b0f4082a09760939588135d60a8e9cc994bfa3e
ac338acf514e7b578fa9e3742ec2c292323b4c1a affected < e9506871a8ea304cde48ff4a57226df2aadddae3
6d88283a49425eb469aa60ffebe76539e73c933e affected —
5.5.13 affected < 5.6
Linux Linux affected
Version Status Constraints
5.6 affected —
0 unaffected < 5.6
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/358697929351f619143f59c6a8a15a4994748b79 cve-icon cve-icon
https://git.kernel.org/stable/c/51b3e1de53ee5b7775c7ff90e67fdb2665fce938 cve-icon cve-icon
https://git.kernel.org/stable/c/5e79e0180515b31b2e2244dc3d256fd8b5a07021 cve-icon cve-icon
https://git.kernel.org/stable/c/860885fcd2611bca8c28dac8b2c1c7ff160f763e cve-icon cve-icon
https://git.kernel.org/stable/c/89789e4c141904506163dcb91c7289a074573931 cve-icon cve-icon
https://git.kernel.org/stable/c/9b0f4082a09760939588135d60a8e9cc994bfa3e cve-icon cve-icon
https://git.kernel.org/stable/c/cc77f0d91e3214e4292208f02a1dc09a31f9aac7 cve-icon cve-icon
https://git.kernel.org/stable/c/e9506871a8ea304cde48ff4a57226df2aadddae3 cve-icon cve-icon
History

Fri, 28 Aug 2026 10:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362
CWE-416

Fri, 28 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() dev_has_sync_state() reads dev->driver twice without holding device_lock() -- once for the NULL check and once to dereference ->sync_state. Some callers only hold device_links_write_lock, which doesn't prevent a concurrent unbind from clearing dev->driver via device_unbind_cleanup(). Fix it by reading dev->driver exactly once with READ_ONCE(), pairing with the WRITE_ONCE() in device_set_driver().
Title driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-28T06:49:15.507Z

Reserved: 2026-08-26T14:34:25.783Z

Link: CVE-2026-80677

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-28T08:16:52.983

Modified: 2026-08-28T08:16:52.983

Link: CVE-2026-80677

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T10:00:06Z

Weaknesses