CVE-2026-80572
Received Received - Intake

Linux Kernel Use-After-Free in BYD Touchscreen Driver

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byd_disconnect() uses timer_delete() before freeing the driver's private data. This does not wait for a running byd_clear_touch() callback, which dereferences the private data and its psmouse pointer. A callback racing with disconnect can therefore access the private data after it has been freed. The timer can also still be re-armed by byd_process_byte() while the disconnect is in progress. Use timer_shutdown_sync() before freeing the private data: it waits for a running callback and turns any later re-arm attempt into a no-op.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-80572
EUVD
EUVD-2026-66487

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel's byd driver. It involves a race condition where the driver's disconnect function frees private data before ensuring a running timer callback has completed. The timer callback may still access the freed private data, leading to potential use-after-free issues.

Detection Guidance

This vulnerability is specific to the Linux kernel's byd driver and requires kernel-level inspection. Detection involves checking for the presence of the vulnerable driver and analyzing kernel logs for race conditions during driver disconnection. No direct network detection commands are applicable.

Impact Analysis

This could cause system instability, crashes, or unexpected behavior due to memory corruption. An attacker might exploit this to execute arbitrary code or escalate privileges on a vulnerable system.

Mitigation Strategies

Update your Linux kernel to a patched version that includes the fix for CVE-2026-80572. The patch replaces timer_delete() with timer_shutdown_sync() in the byd driver to prevent use-after-free conditions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80572. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart