[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2026-80730":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":10,"cwes":11,"cpes":12,"technologies":13,"references":14,"score":21,"epss_score":22,"epss_percentile":23,"is_kev":10,"cisa_kev_date_added":24,"cisa_kev_due_date":24,"cisa_ssvc":25,"attack_mappings":31,"exploits":32},384604,"CVE-2026-80730","EUVD-2026-70334","In the Linux kernel, the following vulnerability has been resolved:\n\nring-buffer: Fix crash passing ERR_PTR to kthread_stop()\n\nIn test_ringbuffer()'s out_free cleanup loop, the check\n`!rb_threads[cpu]` only catches NULL entries and misses entries that\nhold an ERR_PTR.\n\nrb_threads[] is static, so unassigned slots are NULL. But when\nkthread_run_on_cpu() fails for a cpu, it stores ERR_PTR(-ENOMEM) (or\n-EINTR) in rb_threads[cpu] before the creation loop jumps to out_free.\nThat entry is non-NULL, so the old `!ptr` check does not break, and the\ncleanup proceeds to call kthread_stop() on the ERR_PTR. kthread_stop()\nthen dereferences the bogus pointer, crashing the kernel during the\nlate_initcall self-test.\n\ncrash logs:\n  BUG: kernel NULL pointer dereference, address: 000000000000001c\n  Oops: 0002 [#1] SMP NOPTI\n  CPU: 1 PID: 1 Comm: swapper\u002F0 Not tainted 7.2.0-rc6-dirty #7 PREEMPT(lazy)\n  RIP: 0010:kthread_stop+0x2e\u002F0x220\n  RBX: fffffffffffffff4\n  CR2: 000000000000001c\n  Call Trace:\n   \u003CTASK>\n   test_ringbuffer+0x1ec\u002F0x650\n   do_one_initcall+0x6c\u002F0x2c0\n   kernel_init_freeable+0x21d\u002F0x420\n   kernel_init+0x15\u002F0x1c0\n   ret_from_fork+0x21b\u002F0x320\n   \u003C\u002FTASK>\n  Kernel panic - not syncing: Fatal exception","2026-09-03T13:06:00Z",{},false,[],[],[],[15,16,17,18,19,20],"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F3ea2fd344d93e3cf9503739b09fd702c0d8f8f0b","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F51d78fad30dd9ae45721224103662bdbcf210096","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F6dd7a06894d6d3dc84319bd0b7d1a7c27df9d902","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F8532983c312e8b875d7c9e440f8ee4674ea4b711","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F91542863abade2fd4f2b361991f5386ad9d19c8c","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F93e7044b548a72022208595d2c1b188bb225ce83",0,0.00173,0.06638,null,{"timestamp":24,"automatable":26,"tech_impact":27,"exploitation":28,"cisa_decision":29,"cisa_remediation_timeline":30},"no","partial","none",{},"FSU",[],[]]