CVE-2026-80654

Published Aug 28, 2026

Overview

CVE-2026-80654 is a known-severity vulnerability. It was published on August 28, 2026.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

soc: xilinx: Shutdown and free rx mailbox channel

A mbox rx channel is requested using mbox_request_channel_byname() in

probe. In remove callback, the rx mailbox channel is cleaned up when the

rx_chan is NULL due to incorrect condition check. The mailbox channel is

not shutdown and it can receive messages even after the device removal.

This leads to use after free. Also the channel resources are not freed.

Fix this by checking the rx_chan correctly.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Ref git.kernel.org/stable/c/a83e77d1e52c01c50096e6e97c57d34e0590d628 Ref git.kernel.org/stable/c/b0f748c563921a7918c78e6a599cefd54de7d688 Ref git.kernel.org/stable/c/b5d2240c2c7bc8370e7ba54a2e1fe3919f55aee5 Ref git.kernel.org/stable/c/fdee7c66c0d7b6869c36b9f9a915abf29ab5b550

Frequently Asked Questions

What is CVE-2026-80654?

CVE-2026-80654 is a known-severity vulnerability. It was published on August 28, 2026.

How severe is CVE-2026-80654?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2026-80654?

How can CyberStrike help with CVE-2026-80654?

CyberStrike's AI-powered security agents can automatically detect CVE-2026-80654 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.