# wifi: mwifiex: Detach sync cmd buffer on interrupted wait

CVE record · `CVE-2026-80944`

- **Identifiers:** `CVE-2026-80944`
- **State:** Confirmed
- **Severity:** CVSS 7.8 High
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 11 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 11 Sept 2026, 19:42 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `3d026d09b28dda24777129a931634949c75a9181 to before 8c67b8c50286e0cb7f18d667e6a37a2ec6e08ff9` (git)
  - affected: `3d026d09b28dda24777129a931634949c75a9181 to before 9024c7729eb523cf4f3a4203966d3a4aaabf030d` (git)
  - affected: `3d026d09b28dda24777129a931634949c75a9181 to before 9e06c9c8a1f10c55d9bc5d139656d58795e64483` (git)
  - affected: `3d026d09b28dda24777129a931634949c75a9181 to before f2134d6ff30cd6e1bf63d6b0a5d8e0839f0168b3` (git)
  - affected: `3d026d09b28dda24777129a931634949c75a9181 to before 20ee9c03f261bf6ac59331e2ca7b46b23646412a` (git)
  - affected: `3d026d09b28dda24777129a931634949c75a9181 to before b1bbeb8970eeb6c6bf3cd5314138103f7b69446d` (git)
  - affected: `3d026d09b28dda24777129a931634949c75a9181 to before d29a165588b6a0cf7a38db5cbd602aef7ef8c658` (git)
  - affected: `3d026d09b28dda24777129a931634949c75a9181 to before ef06882c7d8a7400b67d0d003b1008093dd589ed` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `3.15`
  - unaffected: `before 3.15` (semver)
  - unaffected: `5.10.270 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.221 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.188 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.157 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.109 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.50 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.4 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 7.8 High, CVSS 3.1: `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0013, the 2nd percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 11 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-80944](https://www.cve.org/CVERecord?id=CVE-2026-80944)
- [NVD: CVE-2026-80944](https://nvd.nist.gov/vuln/detail/CVE-2026-80944)

### References from the CNA

- <https://git.kernel.org/stable/c/8c67b8c50286e0cb7f18d667e6a37a2ec6e08ff9>
- <https://git.kernel.org/stable/c/9024c7729eb523cf4f3a4203966d3a4aaabf030d>
- <https://git.kernel.org/stable/c/9e06c9c8a1f10c55d9bc5d139656d58795e64483>
- <https://git.kernel.org/stable/c/f2134d6ff30cd6e1bf63d6b0a5d8e0839f0168b3>
- <https://git.kernel.org/stable/c/20ee9c03f261bf6ac59331e2ca7b46b23646412a>
- <https://git.kernel.org/stable/c/b1bbeb8970eeb6c6bf3cd5314138103f7b69446d>
- <https://git.kernel.org/stable/c/d29a165588b6a0cf7a38db5cbd602aef7ef8c658>
- <https://git.kernel.org/stable/c/ef06882c7d8a7400b67d0d003b1008093dd589ed>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-80944>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-80944/>. Everything for agents: <https://agentprime.io/llms.txt>.