CVE-2026-80767: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-80767DEBIAN-CVE-2026-80767
Published 04-09-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-80767 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 8.7% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.19%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 1
MGASA-2026-0506OPENSUSE-SU-2026:11773-1

Timeline

  1. 04-09-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix use-after-free in enable_sensor enable_sensor_store() can call set_power_report_state(), which dereferences sensor_inst->power_state and sensor_inst->report_state. These pointers refer to entries in sensor_inst->fields. Create the field attributes before exposing the enable_sensor sysfs attribute, so enable_sensor cannot be accessed before the state it depends on has been initialized. On remove, delete enable_sensor before freeing the field attributes, so a concurrent sysfs write cannot dereference freed memory through power_state or report_state.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.19%

Chance of exploitation in the next 30 days

Percentile

9%

Versus all other CVEs

30-day change

0.00 pp

From 0.19% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu169 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.187-1 | < 6.12.107-1 | < 7.1.12-1
  • linux-6.12< 6.12.107-1~deb12u1
Linux1 product
  • linux≥ 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d, < c2be74b0272b7f8f60739e7aaf0d36c0befe7136 | ≥ 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d, < d7cbea1d342a16ec96d9eb3d7bd0ba2d4b2f2855 | ≥ 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d, < d37ff4e3635c18af907f25712596f8ccec323751 | ≥ 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d, < 2ce90cfc6646a32100feabd7110ae0352aa01167 | ≥ 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d, < 244a1cb638370490ed74a8adb5cc3f1212602e32 | ≥ 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d, < 8406d4b69d48bc72fb6f8812a65a17a1f903440b | ≥ 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d, < c0757f10610542d763bd0bf9bda455b78afeef0b | ≥ 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d, < 7bb79a3cf45e0805aef74457e19deb77e18cf196 | ≥ 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d, < ad8fb82b04422f49530d2aa2753cc81d1c60102c | 4.1

3 vendors · 172 products

References

14 links
Show all 14 references