CVE-2026-80694

Received Received - Intake

Kernel Netpoll Controller Vulnerability in MediaTek Ethernet Driver

Publication date: 2026-08-28

Last updated on: 2026-08-29

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller mtk_handle_irq_rx expects a struct mtk_eth * (matching the request_irq cookie), but mtk_poll_controller incorrectly passed the net_device *. Calling ndo_poll_controller with CONFIG_NET_POLL_CONTROLLER enabled would then crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-29

Generated

2026-09-17

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-80694

EUVD

EUVD-2026-67429

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's MediaTek ethernet driver. It occurs when the mtk_poll_controller function incorrectly passes a net_device pointer to mtk_handle_irq_rx, which expects a mtk_eth pointer. This mismatch can cause a crash when CONFIG_NET_POLL_CONTROLLER is enabled.

Detection Guidance

This vulnerability can be detected by checking if your system is running a vulnerable Linux kernel version with CONFIG_NET_POLL_CONTROLLER enabled. Check kernel version with uname -a and verify the config with grep CONFIG_NET_POLL_CONTROLLER /boot/config-$(uname -r). If enabled and using mtk_eth_soc driver, the system is potentially vulnerable.

Impact Analysis

If you use a system with a MediaTek ethernet controller and have CONFIG_NET_POLL_CONTROLLER enabled, this flaw could cause system crashes during network operations. This may lead to denial of service or unexpected system behavior.

Compliance Impact

This vulnerability is a kernel-level network driver issue in the Linux kernel that could cause system crashes when CONFIG_NET_POLL_CONTROLLER is enabled. It does not directly impact data privacy, security controls, or compliance with standards like GDPR or HIPAA, as it is not a data exposure or access control flaw.

Mitigation Strategies

Immediately update your Linux kernel to a patched version where this issue is resolved. Disable CONFIG_NET_POLL_CONTROLLER if not required. If using affected hardware with mtk_eth_soc, avoid enabling network polling features until a fix is applied.

Hi! I’m here to help you understand CVE-2026-80694. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70