CVE-2026-80643: EDAC/igen6: Fix call trace due to missing release()
In the Linux kernel, the following vulnerability has been resolved:
EDAC/igen6: Fix call trace due to missing release()
When unloading the igen6edac driver, there is a call trace:
Device '(null)' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. WARNING: drivers/base/core.c:2567 at devicerelease+0x84/0x90, CPU#5: rmmod/127209 ... RIP: 0010:devicerelease+0x84/0x90 Call Trace: <TASK> kobjectput+0x8c/0x220 putdevice+0x17/0x30 igen6unregistermcis+0xa2/0xe0 [igen6edac] igen6remove+0x82/0xb0 [igen6edac] ...
Fix the call trace by providing empty release() functions for the memory controller devices.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Avoid unloading the igen6_edac driver (rmmod) on affected systems until the device_release call trace issue is fixed, as unloading triggers the call trace via device_release and igen6_remove/igen6_unregister_mcis.
Event History
Frequently Asked Questions
When does this issue occur?
The warning occurs when the igen6_edac driver is unloaded. The affected cleanup path unregisters memory controller devices that lack a release() function.
What is required to trigger the call trace?
An attacker is not described in the available information. Triggering the reported condition requires unloading the igen6_edac kernel driver, such as through rmmod.
What mitigation is available if an update cannot be applied immediately?
Avoid unloading the igen6_edac driver. The provided fix adds empty release() functions for its memory controller devices, preventing the device-release warning during driver removal.