CVE-2026-80679s390/dasd: Fix potential NULL pointer dereference
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasd_release_space() checks the implementation of the is_ese() discipline function before calling it to determine if a given device is an ESE DASD. The current usage of the logical AND operator will lead to a NULL pointer dereference as the function is called even if the function pointer is NULL. Fix this by using the logical OR operator.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 28, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 91dc4a197569230683ca8bad551e655a4bf14c30 before dbf2ae34d2f1390a9fc1abf3dce7f809e022caae; from 91dc4a197569230683ca8bad551e655a4bf14c30 before 3000367a512b1283ca52230bf21f8c91dfbec45b; from 91dc4a197569230683ca8bad551e655a4bf14c30 before cdc7b73d0c5a9cd6360b4f8c36eae23b02097e4c; from 91dc4a197569230683ca8bad551e655a4bf14c30 before e156c70c505c6c9adce3b7be5a82025f00544709; from 91dc4a197569230683ca8bad551e655a4bf14c30 before 3453a993a3f14c1684560ecf26585046976f6ac6; 91dc4a197569230683ca8bad551e655a4bf14c30 builds before 86cdfd061509bcde84f3145f7221ba64e3e53b1f; from 91dc4a197569230683ca8bad551e655a4bf14c30 before 96b8e09b09539f252a5eeea6baebd93c2e3779bd; from 91dc4a197569230683ca8bad551e655a4bf14c30 before 9973026f572db6b67570cadc30942f3014e41079 | CNA record |
References
- https://git.kernel.org/stable/c/dbf2ae34d2f1390a9fc1abf3dce7f809e022caae
- https://git.kernel.org/stable/c/3000367a512b1283ca52230bf21f8c91dfbec45b
- https://git.kernel.org/stable/c/cdc7b73d0c5a9cd6360b4f8c36eae23b02097e4c
- https://git.kernel.org/stable/c/e156c70c505c6c9adce3b7be5a82025f00544709
- https://git.kernel.org/stable/c/3453a993a3f14c1684560ecf26585046976f6ac6
- https://git.kernel.org/stable/c/86cdfd061509bcde84f3145f7221ba64e3e53b1f
- https://git.kernel.org/stable/c/96b8e09b09539f252a5eeea6baebd93c2e3779bd
- https://git.kernel.org/stable/c/9973026f572db6b67570cadc30942f3014e41079
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.