CVE-2026-80679
Received Received - Intake

NULL Pointer Dereference in Linux Kernel s390 DASD Driver

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasd_release_space() checks the implementation of the is_ese() discipline function before calling it to determine if a given device is an ESE DASD. The current usage of the logical AND operator will lead to a NULL pointer dereference as the function is called even if the function pointer is NULL. Fix this by using the logical OR operator.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-09-17
AI Q&A
2026-08-28
EPSS Evaluated
2026-09-15
NVD
CVE-2026-80679
EUVD
EUVD-2026-67555

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a NULL pointer dereference vulnerability in the Linux kernel's s390/dasd driver. The issue occurs in dasd_release_space() when checking the is_ese() function. The current code uses a logical AND operator which causes the function to be called even if the function pointer is NULL, leading to a crash.

Detection Guidance

This vulnerability is specific to the Linux kernel's s390/dasd driver and involves a NULL pointer dereference in dasd_release_space(). Detection requires checking the kernel version and examining the dasd driver implementation for the is_ese() function pointer handling. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could cause a system crash or kernel panic if exploited, leading to denial of service. It affects systems using s390 DASD devices with the ESE discipline feature.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a local kernel issue involving a NULL pointer dereference in the s390/dasd driver, which could lead to system crashes or instability but does not involve data exposure or privacy violations.

Mitigation Strategies

Apply the Linux kernel patch that fixes the NULL pointer dereference in dasd_release_space() by updating to a patched kernel version where the logical OR operator is used instead of logical AND for the is_ese() function check.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80679. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart