CVE-2026-80643
Received Received - Intake

EDAC/igen6 Driver Call Trace Fix on Linux Kernel

Vulnerability report for CVE-2026-80643, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release() When unloading the igen6_edac driver, there is a call trace: Device '(null)' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. WARNING: drivers/base/core.c:2567 at device_release+0x84/0x90, CPU#5: rmmod/127209 ... RIP: 0010:device_release+0x84/0x90 Call Trace: <TASK> kobject_put+0x8c/0x220 put_device+0x17/0x30 igen6_unregister_mcis+0xa2/0xe0 [igen6_edac] igen6_remove+0x82/0xb0 [igen6_edac] ... Fix the call trace by providing empty release() functions for the memory controller devices.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-08-28
AI Q&A
2026-08-28
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel occurs when unloading the igen6_edac driver. It causes a call trace because the memory controller devices lack a release function, violating kernel requirements. The trace shows a warning about a missing release() function and a device release failure.

Detection Guidance

This vulnerability is specific to the Linux kernel's EDAC/igen6 driver and manifests as a call trace when unloading the driver. Detection involves checking for the presence of the igen6_edac module and verifying if the system logs show the described call trace during driver unloading. Use commands like 'lsmod | grep igen6_edac' to check if the module is loaded and 'dmesg | grep -i 'call trace' -A 5' to inspect kernel logs for the error.

Impact Analysis

This vulnerability may cause system instability or crashes when unloading the igen6_edac driver. It could lead to kernel warnings, potential resource leaks, or unexpected behavior in systems using this driver.

Mitigation Strategies

Apply the kernel patch that fixes the missing release() function in the igen6_edac driver. If the driver is not in use, unload it immediately using 'sudo rmmod igen6_edac' to prevent the call trace. Ensure your kernel is updated to a version that includes the fix.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80643. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart