# can: isotp: fix timer drain order, wakeup handling and tx_gen ordering

CVE record · `CVE-2026-80889`

- **Identifiers:** `CVE-2026-80889`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 4 Sept 2026
- **Updated:** 4 Sept 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 4 Sept 2026, 17:11 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `bbedeb67a9a684f2fb78c55bd3662c400526715e to before 8acab9fc66d6f426c36968c91a979f70784945a7` (git)
  - affected: `377a8f500704da42ed86a4541ed930e9dcfdb2ea to before af7e25c649ed68cbad07f8185af0f31b892cbf29` (git)
  - affected: `6da8119e8dd542194103139812d1a4b7dcd1aedd to before 2753722612d8824d3910096f93059f669009b0f0` (git)
  - affected: `0b05eca9589f609e2491b528dccf683168a4cda8 to before bf5c4a8b24acb12739ebb9aea5510b007e4f5239` (git)
  - affected: `a7d90e7b5e75d7406c889fe36e9a61ee364a00cb to before deca7746b57d982cd4f0301f4443f56780c4a048` (git)
  - affected: `37beb16e08cae94cc05840c7274225e3b0b38ae7 to before 10be509fa8fd95d1e47d40d1f68b0b26dfe9d572` (git)
  - affected: `4f1fdf1a1c317bcac0c6b6c8e12642c9983de1ca to before 35c62ac98d06669aa3f0f38b7829eaca929a611e` (git)
  - affected: `cf070fe33bfbd1a4c21236078fadb35dd223a157 to before 050f010f920da17c1044a4f174766ad553e770b6` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.10.265 to before 5.10.267` (semver)
  - affected: `5.15.216 to before 5.15.218` (semver)
  - affected: `6.1.183 to before 6.1.185` (semver)
  - affected: `6.6.148 to before 6.6.151` (semver)
  - affected: `6.12.101 to before 6.12.103` (semver)
  - affected: `6.18.40 to before 6.18.44` (semver)
  - affected: `7.1.5 to before 7.1.8` (semver)
  - Other versions: unaffected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0018, the 7th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 4 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-80889](https://www.cve.org/CVERecord?id=CVE-2026-80889)
- [NVD: CVE-2026-80889](https://nvd.nist.gov/vuln/detail/CVE-2026-80889)

### References from the CNA

- <https://git.kernel.org/stable/c/8acab9fc66d6f426c36968c91a979f70784945a7>
- <https://git.kernel.org/stable/c/af7e25c649ed68cbad07f8185af0f31b892cbf29>
- <https://git.kernel.org/stable/c/2753722612d8824d3910096f93059f669009b0f0>
- <https://git.kernel.org/stable/c/bf5c4a8b24acb12739ebb9aea5510b007e4f5239>
- <https://git.kernel.org/stable/c/deca7746b57d982cd4f0301f4443f56780c4a048>
- <https://git.kernel.org/stable/c/10be509fa8fd95d1e47d40d1f68b0b26dfe9d572>
- <https://git.kernel.org/stable/c/35c62ac98d06669aa3f0f38b7829eaca929a611e>
- <https://git.kernel.org/stable/c/050f010f920da17c1044a4f174766ad553e770b6>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-80889>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-80889/>. Everything for agents: <https://agentprime.io/llms.txt>.