CVE-2026-80694

A flaw was found in the Linux kernel's mtk_eth_soc Ethernet driver. The mtk_poll_controller function incorrectly passed a net_device pointer instead of an mtk_eth structure to mtk_handle_irq_rx. This incorrect parameter passing can lead to a system crash when ndo_poll_controller is called with CONFIG_NET_POLL_CONTROLLER enabled, resulting in a Denial of Service (DoS).

A Moderate-impact flaw was found in the Linux kernel's MediaTek Ethernet (mtk_eth_soc) driver. The mtk_poll_controller function passed a net_device structure to mtk_handle_irq_rx instead of the struct mtk_eth structure that function expects, so invoking the driver's ndo_poll_controller callback on a kernel built with CONFIG_NET_POLL_CONTROLLER enabled would crash the system, resulting in a denial of service. Red Hat rated this flaw Moderate (CVSS 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) because triggering the issue requires local access to the system and affects only availability. All Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel and kernel-rt components are not affected by this flaw because the vulnerable code is not present in the shipped kernels. The CVE.org severity of Critical (9.8) differs from Red Hat's assessment because it assumes an unauthenticated remote network attack with confidentiality and integrity impact, which does not match the local, availability-only nature of this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.