CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller
Published Aug 28, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtkethsoc: pass eth to mtkhandleirqrx in pollcontroller
mtkhandleirqrx expects a struct mtketh (matching the requestirq cookie), but mtkpollcontroller incorrectly passed the netdevice . Calling ndopollcontroller with CONFIGNETPOLLCONTROLLER enabled would then crash.
Affected Software
1 affected component
Linux Linux kernel
Event History
Aug 28, 2026
CVE Published
via MITRE·06:53 AM
Data Sourced
via MITRE·06:53 AM
Description
Frequently Asked Questions
1
Which systems are exposed to this crash condition?
Systems using the Linux kernel MediaTek Ethernet driver are exposed when CONFIG_NET_POLL_CONTROLLER is enabled and ndo_poll_controller is invoked.
2
What is required to trigger the issue?
The affected driver's ndo_poll_controller callback must be called. In that path, the driver passes a net_device pointer where the receive interrupt handler expects a struct mtk_eth pointer, causing a crash.