What is the CVSS score of CVE-2026-80614?

CVE-2026-80614 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel EMAC are affected by CVE-2026-80614?

A Linux kernel EMAC network driver flaw causes complete system outages on affected infrastructure.. A patch is available.

How to fix or mitigate CVE-2026-80614?

Within 24 hours, inventory all Linux systems using EMAC network drivers and obtain affected kernel versions from your distribution vendor's security advisory. Within 7 days, apply patched kernel versions available from your Linux vendor to all affected production systems per your change management process. Within 30 days, complete fleet-wide validation and confirm all affected systems have been patched and remain stable.

Linux Kernel EMAC CVE-2026-80614

EUVD-2026-67490 HIGH

2026-08-28 Linux

GHSA-72vm-9gwv-cwmm

Denial Of Service Linux Red Hat Suse

7.5

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

5.9 MEDIUM

AV:N retained since a remote Ethernet frame can trigger the interrupt, but AC:H reflects the millisecond-scale probe-phase timing window required for exploitation.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Red Hat

5.5 MEDIUM

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 29, 2026 - 07:34 vuln.today

CVSS changed

Aug 29, 2026 - 07:22 NVD

7.5 (HIGH)

Patch available

Aug 28, 2026 - 09:02 EUVD

CVE Published

Aug 28, 2026 - 06:48 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 28, 2026 - 06:48 cve.org

HIGH 7.5

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

net: emac: Fix NULL pointer dereference in emac_probe

Move devm_request_irq() after devm_platform_ioremap_resource() so that dev->emacp is mapped before the interrupt handler can fire. An early interrupt hitting emac_irq() would dereference the NULL dev->emacp and crash.

Also remove redundant error message. devm_platform_ioremap_resource() already returns an error message with dev_err_probe().

AnalysisAI

NULL pointer dereference in the Linux kernel's EMAC (Ethernet MAC) network driver during device probe can crash the kernel, resulting in complete system availability loss on affected hardware. The fault lies in emac_probe() where devm_request_irq() is called before dev->emacp is mapped via devm_platform_ioremap_resource(), leaving a race window during initialization in which any hardware interrupt invoking emac_irq() will dereference a NULL pointer and trigger a kernel panic. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires the target system to run Linux with the IBM EMAC network driver on compatible PowerPC-based embedded or SoC hardware. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The official CVSS base score of 7.5 with vector AV:N/AC:L/PR:N/UI:N overstates practical exploitability for this vulnerability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	The primary remediation is to upgrade the Linux kernel to a patched stable release: 7.2, 7.1.5, or 6.18.40 as confirmed by EUVD-2026-67490. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, inventory all Linux systems using EMAC network drivers and obtain affected kernel versions from your distribution vendor's security advisory. …

Threat intelligence, references, and detailed analysis are available after sign-in.

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

CVE-2026-80614 vulnerability details – vuln.today

Back

Linux Kernel EMAC CVE-2026-80614

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Unlock full vulnerability intelligence

Attack ChainAIDerived

Vulnerability AssessmentAI

Recommended ActionAI

Same technique Denial Of Service

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code