CVE record · CVE-2026-80889

can: isotp: fix timer drain order, wakeup handling and tx_gen ordering

No CVSS scoreEPSS 0.0018 · 7th percentile

Published by the CVE Program (CNA: Linux) at 4 Sept 2026, 17:11 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected bbedeb67a9a684f2fb78c55bd3662c400526715e to before 8acab9fc66d6f426c36968c91a979f70784945a7 git
  • affected 377a8f500704da42ed86a4541ed930e9dcfdb2ea to before af7e25c649ed68cbad07f8185af0f31b892cbf29 git
  • affected 6da8119e8dd542194103139812d1a4b7dcd1aedd to before 2753722612d8824d3910096f93059f669009b0f0 git
  • affected 0b05eca9589f609e2491b528dccf683168a4cda8 to before bf5c4a8b24acb12739ebb9aea5510b007e4f5239 git
  • affected a7d90e7b5e75d7406c889fe36e9a61ee364a00cb to before deca7746b57d982cd4f0301f4443f56780c4a048 git
  • affected 37beb16e08cae94cc05840c7274225e3b0b38ae7 to before 10be509fa8fd95d1e47d40d1f68b0b26dfe9d572 git
  • affected 4f1fdf1a1c317bcac0c6b6c8e12642c9983de1ca to before 35c62ac98d06669aa3f0f38b7829eaca929a611e git
  • affected cf070fe33bfbd1a4c21236078fadb35dd223a157 to before 050f010f920da17c1044a4f174766ad553e770b6 git
Other versions: unaffected
Linux Linux
  • affected 5.10.265 to before 5.10.267 semver
  • affected 5.15.216 to before 5.15.218 semver
  • affected 6.1.183 to before 6.1.185 semver
  • affected 6.6.148 to before 6.6.151 semver
  • affected 6.12.101 to before 6.12.103 semver
  • affected 6.18.40 to before 6.18.44 semver
  • affected 7.1.5 to before 7.1.8 semver
Other versions: unaffected
Identifiers
CVE-2026-80889
CNA
Linux
Published
4 Sept 2026
Updated
4 Sept 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0018, the 7th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 4 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.