CVE-2026-80861

A flaw was found in the Linux kernel's USB eXtensible Host Controller Interface (xHCI) driver. When an xHCI host controller is inaccessible during its setup process, the driver attempts to read from an incorrectly calculated memory address. This unaligned memory access can cause a kernel panic, leading to a complete system crash and denial of service. This issue primarily affects systems utilizing the ARM64 architecture.

This vulnerability is rated as having a Low impact by Red Hat because triggering it requires specific hardware failure conditions or an inaccessible host controller during device initialization, limiting the issue to a local denial of service. Under typical Red Hat Enterprise Linux deployments, an unprivileged user cannot induce the controller power-state failure or bus detachment necessary to trigger the unaligned memory fault during setup. Additionally, the crash primarily affects architectures that reject unaligned MMIO operations, such as ARM64, and cannot be exploited to compromise system confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.