CVE-2026-98768Medium· 4.7▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: usb: typec: anx7411 - stop the IRQ before destroying the workqueue The IRQ is devm-managed, so it can still queue plat->work while remove() is tearing the queue down. …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 20.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
— → 4.7
none → medium
Last analysed / modified upstream
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: anx7411 - stop the IRQ before destroying the workqueue
The IRQ is devm-managed, so it can still queue plat->work while remove() is tearing the queue down. Disable it first.
Linux >= fe6d8a9c8e6456f8e7ba6b4ee528460beaf65a71 < a789838675afa3aa174e744f3cef508cd27e7bb1Linux >= fe6d8a9c8e6456f8e7ba6b4ee528460beaf65a71 < 675056e0edb49c0002ebfbc289e6c777bbf315a2Linux >= fe6d8a9c8e6456f8e7ba6b4ee528460beaf65a71 < 50a92c02551c10e308caa55f7045f31abcef511fLinux >= fe6d8a9c8e6456f8e7ba6b4ee528460beaf65a71 < cb6bf2c707805211f606fb1e06fe28d9affe5ea7Linux >= fe6d8a9c8e6456f8e7ba6b4ee528460beaf65a71 < 469600d5d292b1482c90dd6853555821d11b8c5fLinux 6.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98769High· 8.4kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (CVE-2026-98769)
CVE-2026-98615Medium· 4.4kernel: eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox (CVE-2026-98615)
CVE-2026-98298High· 7.0In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() In mmp_pdma_prep_slave_sg(), for_each_sg() iterates the scatterlist putting each entry into 'sg', …
CVE-2026-98302Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: net: fddi: skfp: fix NULL deref when setting the MAC address while down skfp_ctl_set_mac_address() calls ResetAdapter() unconditionally, without checking netif_running…
CVE-2026-98300Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). tcp_v6_do_rcv() no longer calls skb_clone_and_charge_r() for TCP_LISTEN since commit…
CVE-2026-98330High· 7.0In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, cfg80211_pernet_exit() moves any wiphy back to the initial namesp…