Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-98159.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-98159
Upstream
Published
2026-08-28T08:16:49Z
Modified
2026-08-30T05:26:50Z
Summary
CVE-2026-80643 affecting package kernel 6.6.150.1-1
Details

In the Linux kernel, the following vulnerability has been resolved:

EDAC/igen6: Fix call trace due to missing release()

When unloading the igen6_edac driver, there is a call trace:

Device '(null)' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. WARNING: drivers/base/core.c:2567 at devicerelease+0x84/0x90, CPU#5: rmmod/127209 ... RIP: 0010:devicerelease+0x84/0x90 Call Trace: <TASK> kobjectput+0x8c/0x220 putdevice+0x17/0x30 igen6unregistermcis+0xa2/0xe0 [igen6edac] igen6remove+0x82/0xb0 [igen6_edac] ...

Fix the call trace by providing empty release() functions for the memory controller devices.

References

Affected packages

Azure Linux:3 / kernel

Package

Name
kernel
Purl
pkg:rpm/azure-linux/kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
6.6.150.1-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-98159.json"