CVE-2026-80572
In the Linux kernel, the following vulnerability has been resolved:
Input: byd - synchronize timer deletion before freeing private data
byd_disconnect() uses timer_delete() before freeing the driver's private
data. This does not wait for a running byd_clear_touch() callback, which
dereferences the private data and its psmouse pointer. A callback racing
with disconnect can therefore access the private data after it has been
freed. The timer can also still be re-armed by byd_process_byte() while
the disconnect is in progress.
Use timer_shutdown_sync() before freeing the private data: it waits for
a running callback and turns any later re-arm attempt into a no-op.
CSIRTS triage
- What
- BYD input driver does not synchronize timer deletion before freeing private data, risking use-after-free.
- Who is affected
- Systems with BYD touchpad driver enabled.
- Urgency
- Medium severity (CVSS 4.7); patch within standard update cycle.
- Action
- Apply the kernel patch that synchronizes timer deletion before freeing private data.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-80572
Get an email if CVE-2026-80572 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
Advisory coverage (3)
- unknownDSA-6477-1 linux - security updatedebian · 2026-08-29
- highCVE-2026-80572: In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize t…nvd · 2026-08-26
- mediumCVE-2026-80572: Input: byd - synchronize timer deletion before freeing private datamsrc · 2026-08-11
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-80572)