CVE-2026-80974: linux
Vulnerability summary
CVE-2026-80974 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 11-09-2026PublishedVulnerability first disclosed.
- 21-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501_devdata in sm501_pci_probe() and sm501_plat_probe() is not freed by the corresponding remove functions sm501_pci_remove() and sm501_plat_remove(). Fix that by adding a call to kfree().
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.21%
Chance of exploitation in the next 30 days
Percentile
10%
Versus all other CVEs
30-day change
+0.01 pp
From 0.20% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu169 products
- linuxAll versions (No fix recorded)
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded)
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linuxAll versions (No fix recorded) | < 6.12.111-1 | < 7.2.6-1
- linux-6.12< 6.12.111-1~deb12u1
Linux1 product
- linux≥ b6d6454fdb66f3829af8b92ab06825b6060fdf7e, < b78e34ed7e97763d493d95a5c1edefffbfd2f356 | ≥ b6d6454fdb66f3829af8b92ab06825b6060fdf7e, < fcc6c3b11d73459e0d55b27c98cc56d59fef4d82 | ≥ b6d6454fdb66f3829af8b92ab06825b6060fdf7e, < 94ca4f040ba489db2d4b66e9d1ee91b4f9a00534 | ≥ b6d6454fdb66f3829af8b92ab06825b6060fdf7e, < c8be3a076a59ec793fb2e4bdb830a709aaea9cce | ≥ b6d6454fdb66f3829af8b92ab06825b6060fdf7e, < 83feedd9d83c0c5199f98c72df0a6196b4aefb4d | 2.6.21
3 vendors · 172 products