0.0
NA
CVE-2026-80679
s390/dasd: Fix potential NULL pointer dereference
Description

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasd_release_space() checks the implementation of the is_ese() discipline function before calling it to determine if a given device is an ESE DASD. The current usage of the logical AND operator will lead to a NULL pointer dereference as the function is called even if the function pointer is NULL. Fix this by using the logical OR operator.

INFO

Published Date :

Aug. 28, 2026, 8:16 a.m.

Last Modified :

Aug. 28, 2026, 8:16 a.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2026-80679 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

No affected product recoded yet

Solution
Fix potential NULL pointer dereference by using logical OR operator.
  • Use logical OR operator instead of logical AND.
  • Apply the patch to the Linux kernel.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-80679 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-80679 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-80679 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2026-80679 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Aug. 28, 2026

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasd_release_space() checks the implementation of the is_ese() discipline function before calling it to determine if a given device is an ESE DASD. The current usage of the logical AND operator will lead to a NULL pointer dereference as the function is called even if the function pointer is NULL. Fix this by using the logical OR operator.
    Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/80xxx/CVE-2026-80679.json">CVE-2026-80679</a>
    Added Reference https://git.kernel.org/stable/c/3000367a512b1283ca52230bf21f8c91dfbec45b
    Added Reference https://git.kernel.org/stable/c/3453a993a3f14c1684560ecf26585046976f6ac6
    Added Reference https://git.kernel.org/stable/c/86cdfd061509bcde84f3145f7221ba64e3e53b1f
    Added Reference https://git.kernel.org/stable/c/96b8e09b09539f252a5eeea6baebd93c2e3779bd
    Added Reference https://git.kernel.org/stable/c/9973026f572db6b67570cadc30942f3014e41079
    Added Reference https://git.kernel.org/stable/c/cdc7b73d0c5a9cd6360b4f8c36eae23b02097e4c
    Added Reference https://git.kernel.org/stable/c/dbf2ae34d2f1390a9fc1abf3dce7f809e022caae
    Added Reference https://git.kernel.org/stable/c/e156c70c505c6c9adce3b7be5a82025f00544709
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.