In the Linux kernel, the following vulnerability has been resolved: i3c: Fix unlocked dereference of dev->desc in… (CVE-2026-80954)
A vulnerability in the Linux kernel's i3c subsystem involved an unlocked dereference of dev->desc in the function i3c_device_get_supported_xfer_mode(). This function accessed dev->desc without holding the required bus lock, which could lead to unsafe memory access. The issue was resolved by changing the code to use dev->bus instead, which is always valid and does not require locking.
AI Analysis
Technical Summary
The Linux kernel's i3c_device_get_supported_xfer_mode() function improperly dereferenced dev->desc without holding bus->lock, violating locking requirements. This could cause unsafe memory access or potential instability. The fix replaces the use of dev->desc with dev->bus, which is safe to access without locking for the device's lifetime.
Potential Impact
The vulnerability could lead to unsafe memory access in kernel code, potentially causing kernel instability or crashes. No direct exploit or active exploitation is reported. The impact is limited to kernel memory safety and stability.
Mitigation Recommendations
A fix has been applied in the Linux kernel source code to replace the unsafe dereference with a safe reference. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly stated; check the vendor or Linux kernel mailing lists for the specific fixed version.
In the Linux kernel, the following vulnerability has been resolved: i3c: Fix unlocked dereference of dev->desc in… (CVE-2026-80954)
Description
A vulnerability in the Linux kernel's i3c subsystem involved an unlocked dereference of dev->desc in the function i3c_device_get_supported_xfer_mode(). This function accessed dev->desc without holding the required bus lock, which could lead to unsafe memory access. The issue was resolved by changing the code to use dev->bus instead, which is always valid and does not require locking.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's i3c_device_get_supported_xfer_mode() function improperly dereferenced dev->desc without holding bus->lock, violating locking requirements. This could cause unsafe memory access or potential instability. The fix replaces the use of dev->desc with dev->bus, which is safe to access without locking for the device's lifetime.
Potential Impact
The vulnerability could lead to unsafe memory access in kernel code, potentially causing kernel instability or crashes. No direct exploit or active exploitation is reported. The impact is limited to kernel memory safety and stability.
Mitigation Recommendations
A fix has been applied in the Linux kernel source code to replace the unsafe dereference with a safe reference. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly stated; check the vendor or Linux kernel mailing lists for the specific fixed version.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-5fmf-26vf-rg68
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-80954"]
Threat ID: 6aa4a03055bf5e2cf5a86f92
Added to database: 09/12/2026, 00:43:28 UTC
Last enriched: 09/12/2026, 01:25:34 UTC
Last updated: 09/12/2026, 02:21:34 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.