Executive brief
The Linux kernel's EDAC/igen6 driver (which monitors memory errors on Intel client SoCs) generates a warning during driver unload because memory controller devices lack a proper cleanup function. While this is not a security vulnerability but rather a code quality issue, it can cause kernel warnings and potential resource leaks during module unloading. The fix simply adds an empty release function to satisfy the kernel's device management requirements.
Technical details
This is a device driver resource management issue, not a security vulnerability. The igen6_edac driver failed to provide a release() callback for device objects, causing the kernel's device_release() function to emit a warning when the driver is unloaded. The vulnerable component is the memory controller device initialization in igen6_register_mci(). The attack vector is local (driver unload), with no authentication required. An attacker cannot exploit this for code execution or privilege escalation; the impact is limited to kernel warnings and potential memory leak issues during module lifecycle. The fix adds a no-op imc_release() function and assigns it to imc->dev.release, satisfying the kernel's device model requirements.
Affected products
- Linux Linux kernel 5.x and later (specific versions with EDAC/igen6 driver)
Timeline
- 2026-08-28: disclosed: CVE-2026-80643 published on NVD
- 2026-04-03: patched: Fix committed by Qiuxu Zhuo upstream