CVE-2026-80614

Received Received - Intake

NULL Pointer Dereference in Linux Kernel EMAC Driver

Publication date: 2026-08-28

Last updated on: 2026-08-29

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer dereference in emac_probe Move devm_request_irq() after devm_platform_ioremap_resource() so that dev->emacp is mapped before the interrupt handler can fire. An early interrupt hitting emac_irq() would dereference the NULL dev->emacp and crash. Also remove redundant error message. devm_platform_ioremap_resource() already returns an error message with dev_err_probe().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-29

Generated

2026-09-17

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-80614

EUVD

EUVD-2026-67490

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a NULL pointer dereference issue in the Linux kernel's EMAC network driver. It occurs during system boot when an interrupt fires before the driver's memory is properly mapped. The crash happens because the interrupt handler tries to access a NULL pointer (dev->emacp) before it is initialized.

Detection Guidance

This vulnerability is specific to the Linux kernel's emac driver and may not have direct network detection methods. Check kernel logs for NULL pointer dereference errors related to emac_probe or emac_irq using commands like 'dmesg | grep emac' or 'journalctl -k | grep emac'.

Impact Analysis

This vulnerability can cause system crashes or instability during boot if the affected EMAC network driver is used. It may lead to denial of service conditions where the system fails to start properly or network functionality becomes unavailable.

Compliance Impact

This vulnerability is a NULL pointer dereference in the Linux kernel's net/emac driver, which could cause a system crash if triggered. It does not directly relate to data privacy or security controls required by GDPR or HIPAA, as it is a stability issue rather than a confidentiality or integrity breach.

Mitigation Strategies

Update your Linux kernel to the latest patched version where this issue is resolved. If immediate patching is not possible, consider disabling the emac driver if not in use or restricting network interfaces using firewall rules.

Hi! I’m here to help you understand CVE-2026-80614. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70