THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-80954 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode() i3c_device_get_supported_xfer_mode() uses dev->desc to obtain the master controller. However, dev->desc must not be dereferenc

[NVD] CVE-2026-80954 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode() i3c_device_get_supported_xfer_mode() uses dev->desc to obtain the master controller. However, dev->desc must not be dereferenc

mednvdPublished 2026-09-11

CVE-2026-80954 CVSS: 7.8 HIGH Published: 2026-09-11T20:19:01.167

In the Linux kernel, the following vulnerability has been resolved:

i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode()

i3c_device_get_supported_xfer_mode() uses dev->desc to obtain the master controller. However, dev->desc must not be dereferenced unless bus->lock is held, and this function does no

Indicators of compromise

CVE-2026-80954cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80954