CVE-2026-80743 ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
A race condition in the Xilinx formatter PCM driver causes a null pointer dereference and kernel crash if an interrupt occurs during probe.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-80743?
CVE-2026-80743 is a vulnerability in Linux, published on 3 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
The irq handlers take a struct device pointer and call dev_get_drvdata() to obtain the driver data. However, the driver data is only set at the end of probe, after devm_request_irq(), so an interrupt taken in between causes the handlers to pass a NULL pointer to readl() and crash.
Pass the private data directly as the devm_request_irq() argument instead of the device pointer, matching what the handlers expect.
Which versions are affected by CVE-2026-80743?
How do I fix CVE-2026-80743?
Apply the vendor's patch.
Is CVE-2026-80743 being exploited?
There is no known exploitation of CVE-2026-80743 in the wild and no public exploit code.
Sources
Also known as AZL-99077, BELL-CVE-2026-80743, DEBIAN-CVE-2026-80743, GHSA-x2vc-grmm-48qg, UBUNTU-CVE-2026-80743.