Critical 9.8Published Aug 28, 2026

CVE-2026-80694net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller

Updated under an hour ago (Oct 26, 2026, 7:40 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller mtk_handle_irq_rx expects a struct mtk_eth * (matching the request_irq cookie), but mtk_poll_controller incorrectly passed the net_device *. Calling ndo_poll_controller with CONFIG_NET_POLL_CONTROLLER enabled would then crash.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 before a9133c4d335e48ba92f4daed10c506378924f976; 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 builds before 3bd58ac9ca0c552651f533c1bd280dd19ae7d4e8; 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 builds before 276f1f180f55d56cf5992a581e20ed2b3dfa6ced; 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 builds before 7eb46318d53940dab63dea7130e720b67a656104; from 8186f6e382d8719d0a4bc0ef218c4dd7cf55b496 before e095f249e2209674f6366f6db0383a2b96e19239	CNA record

References

References

https://git.kernel.org/stable/c/a9133c4d335e48ba92f4daed10c506378924f976
https://git.kernel.org/stable/c/3bd58ac9ca0c552651f533c1bd280dd19ae7d4e8
https://git.kernel.org/stable/c/276f1f180f55d56cf5992a581e20ed2b3dfa6ced
https://git.kernel.org/stable/c/7eb46318d53940dab63dea7130e720b67a656104
https://git.kernel.org/stable/c/e095f249e2209674f6366f6db0383a2b96e19239

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.