CVE-2026-80643

Source
https://cve.org/CVERecord?id=CVE-2026-80643
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80643.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-80643
Downstream
Published
2026-08-28T06:48:54Z
Modified
2026-08-30T03:48:20Z
Summary
EDAC/igen6: Fix call trace due to missing release()
Details

In the Linux kernel, the following vulnerability has been resolved:

EDAC/igen6: Fix call trace due to missing release()

When unloading the igen6_edac driver, there is a call trace:

Device '(null)' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. WARNING: drivers/base/core.c:2567 at device_release+0x84/0x90, CPU#5: rmmod/127209 ... RIP: 0010:device_release+0x84/0x90 Call Trace: kobject_put+0x8c/0x220 put_device+0x17/0x30 igen6_unregister_mcis+0xa2/0xe0 [igen6_edac] igen6_remove+0x82/0xb0 [igen6_edac] ...

Fix the call trace by providing empty release() functions for the memory controller devices.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80643.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
10590a9d4f23e0a519730d79d39331df60ad2079
Fixed
9a84ced0243c74aa431ec287555054c69e6167d1
Fixed
a341302c5126ef96bb45286224d67ef60a24281e
Fixed
ab1f9d466c7d83ab0d2a529e07984e53b5960dcd

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80643.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80643.json"