In the Linux kernel, the following vulnerability has been resolved:
soc: xilinx: Fix race condition in event registration
The zynqmppower driver registers handlers for suspend and subsystem restart events using registerevent(). However, the work structures (zynqmppminitsuspendwork and zynqmppminitrestartwork) used by these handlers were allocated and initialized after the registration call.
This created a race window where, if the firmware triggered an event immediately after registration but before allocation, the callback (suspendeventcallback or subsystemrestarteventcallback) would dereference a NULL pointer in workpending(), leading to a crash.
Fix this by allocating and initializing the work structures before registering the events.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80655.json",
"cna_assigner": "Linux"
}