What’s Vulnerable › Vulnerabilities

CVE-2026-80614: net: emac: Fix NULL pointer dereference in emac_probe

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-28 · updated 2026-10-21

Description

In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer dereference in emac_probe Move devm_request_irq() after devm_platform_ioremap_resource() so that dev->emacp is mapped before the interrupt handler can fire. An early interrupt hitting emac_irq() would dereference the NULL dev->emacp and crash. Also remove redundant error message. devm_platform_ioremap_resource() already returns an error message with dev_err_probe().

Affected products

• Linux kernel: 6.12 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/44068b6863fbda78fc810921ddf61642c377b3ca
• https://git.kernel.org/stable/c/90bb7164878b5e57d447f02c71c238f4f246016a
• https://git.kernel.org/stable/c/a103cdb0681e7185d1b0a12ce6a7c5416c208ccd
• https://git.kernel.org/stable/c/f623d38fe6c4e8c40b23f42cc6fe6963fa49997b

Get alerted when CVE-2026-80614 or the next vulnerability affects your stack