Race Condition in Linux Kernel Affecting Timer Deletion and Private Data

CVE-2026-80572

What is CVE-2026-80572?

The Linux Kernel has a vulnerability related to race conditions during timer deletion in the byd driver. Specifically, the byd_disconnect() function calls timer_delete() before ensuring that any running callbacks, such as byd_clear_touch(), have completed. This can lead to a situation where the callback accesses already freed private data, risking undefined behavior and potential memory corruption. The recommended fix involves implementing timer_shutdown_sync() to ensure that callbacks have completed before the private data is freed, effectively preventing any subsequent access to freed memory.

References