Uncontrolled Memory Management in Linux Kernel xhci Driver

CVE-2026-80923

What is CVE-2026-80923?

A vulnerability in the Linux kernel's xhci driver results from an incomplete cleanup process during module unloading. When tty_register_driver() fails to execute properly, the driver reference is dropped without adequately nullifying the global dbc_tty_driver. As a consequence, the subsequent attempt to unregister the driver during module exit can lead to a use-after-free condition, indicating a potential for exploitation and instability in kernel operations. This issue necessitates careful management of references to avoid memory access violations.

References