CVE-2026-80614

net: emac: Fix NULL pointer dereference in emac_probe

HIGH
7.5
CVSS Score
Published: August 28, 2026 at 06:48 AM UTC
Updated: October 21, 2026 at 01:19 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.5
Exploit prediction
EPSS 0.6%

Description

In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer dereference in emac_probe Move devm_request_irq() after devm_platform_ioremap_resource() so that dev->emacp is mapped before the interrupt handler can fire. An early interrupt hitting emac_irq() would dereference the NULL dev->emacp and crash. Also remove redundant error message. devm_platform_ioremap_resource() already returns an error message with dev_err_probe().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.12dcc34ef7c83473222027f475014a2bf8ab798372
Vendor states this is fixed in 44068b6863fbda78fc810921ddf61642c377b3ca (fixed)
Vendor states this is fixed in a103cdb0681e7185d1b0a12ce6a7c5416c208ccd (fixed)
Vendor states this is fixed in f623d38fe6c4e8c40b23f42cc6fe6963fa49997b (fixed)
Vendor states this is fixed in 6.12 (unaffected)
Vendor states this is fixed in 6.12.114 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

CVSS

7.5HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card