8.4

CVE-2026-80967: linux

CVSS: 8.4v3.1HighReceived
AliasesUBUNTU-CVE-2026-80967DEBIAN-CVE-2026-80967
Published 11-09-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-80967 is a high (CVSS 8.4) vulnerability in linux. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.6% of scored vulnerabilities.

Overall risk
34/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.4/10
010
High · v3.1 (CVE.org)
EPSS score
0.18%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2026:11805-1

Timeline

  1. 11-09-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr_probe() requests pcxhr_threaded_irq() before initializing mgr->lock, even though the threaded handler takes that mutex. Initialize the manager locks before request_threaded_irq() so an early interrupt cannot run against uninitialized mutex state during probe.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.18%

Chance of exploitation in the next 30 days

Percentile

8%

Versus all other CVEs

30-day change

0.00 pp

From 0.18% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu169 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linuxAll versions (No fix recorded) | < 6.1.190-1 | < 6.12.111-1 | < 7.2.6-1
  • linux-6.12< 6.12.111-1~deb12u1
Linux1 product
  • linux≥ 9bef72bdb26e291d6dffb04768741a0e49582666, < 039602d6ddb1febbb0561b30dab04461f78a1319 | ≥ 9bef72bdb26e291d6dffb04768741a0e49582666, < a5f405adb0229c9cf64eb3d695c333c92e3d3d4f | ≥ 9bef72bdb26e291d6dffb04768741a0e49582666, < ede25b7fea0d7487ee8528bf35dc7b9a1cbcd814 | ≥ 9bef72bdb26e291d6dffb04768741a0e49582666, < c069b3cfd753d6688ea0271c43553631ab38ce10 | ≥ 9bef72bdb26e291d6dffb04768741a0e49582666, < 7ef9ad82d95dd3c74570d80a689a0570fbc7539e | ≥ 9bef72bdb26e291d6dffb04768741a0e49582666, < 7cf280fbef5db6310e1b32074c8c34d1ba459796 | ≥ 9bef72bdb26e291d6dffb04768741a0e49582666, < 6c97817e20598e5473094e0e38d1f51f1cf4dfff | 3.18

3 vendors · 172 products

References

11 links
Show all 11 references