THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-80995 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctp_route_lookup() mctp_route_lookup() uses rt->dev without holding a reference on it. mctp_route_lookup_single() returns the route under RCU only, so the rou

[NVD] CVE-2026-80995 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctp_route_lookup() mctp_route_lookup() uses rt->dev without holding a reference on it. mctp_route_lookup_single() returns the route under RCU only, so the rou

mednvdPublished 2026-09-11

CVE-2026-80995 CVSS: 7.8 HIGH Published: 2026-09-11T20:19:06.497

In the Linux kernel, the following vulnerability has been resolved:

net: mctp: hold a reference to the route device in mctp_route_lookup()

mctp_route_lookup() uses rt->dev without holding a reference on it. mctp_route_lookup_single() returns the route under RCU only, so the route's device can be torn down concurrently: mctp_dev_pu

Indicators of compromise

CVE-2026-80995cve
CVE-2023-3439cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80995