CVE-2026-80597
Received Received - Intake

NULL Pointer Dereference in Linux Kernel MTD VMU-Flash Driver

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtd_info contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-09-17
AI Q&A
2026-08-28
EPSS Evaluated
2026-09-15
NVD
CVE-2026-80597
EUVD
EUVD-2026-67473

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a NULL pointer dereference vulnerability in the Linux kernel's mtd (Memory Technology Device) subsystem, specifically in the vmu-flash map driver. It occurs during initialization when the mtd_info structure's device field is not properly linked to its parent device. This causes the initialization to fail with a NULL pointer dereference error.

Detection Guidance

This vulnerability can be detected by checking for NULL pointer dereferences in the mtd subsystem during kernel initialization. Look for kernel logs or oops messages indicating a NULL pointer dereference in vmu-flash initialization. Use dmesg or journalctl to inspect kernel logs for errors related to mtd or vmu-flash.

Impact Analysis

This vulnerability could cause system crashes or instability when the affected mtd subsystem is initialized, potentially leading to denial of service conditions. It may also prevent proper functioning of flash memory devices managed by this subsystem.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a technical issue in the Linux kernel's MTD subsystem. Compliance impact would depend on how the affected system is used in a broader context.

Mitigation Strategies

Apply the latest kernel update or patch that resolves this issue. If a patch is not available, avoid using the vmu-flash MTD map driver until a fix is released. Monitor kernel security advisories for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80597. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart