CVE-2026-80691

Received Received - Intake

Linux kernel SCSI Target iblock PR ops NULL Pointer Dereference

Publication date: 2026-08-28

Last updated on: 2026-08-29

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE In the iblock_execute_pr_out() function, PRO_PREEMPT, PRO_PREEMPT_AND_ABORT, and PRO_RELEASE all perform callback capability checks through ops->pr_clear. The error check allows unimplemented hooks to pass through the gate, resulting dereferencing a NULL function pointer. Check whether the hooks that need to be called are supported.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-29

Generated

2026-09-17

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-80691

EUVD

EUVD-2026-67426

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's SCSI target subsystem, specifically in the iblock_execute_pr_out function. It involves incorrect NULL checks for PR operations (PREEMPT, PREEMPT_AND_ABORT, RELEASE). When these operations are called, the code fails to properly verify if the required callback functions are implemented, leading to potential NULL pointer dereferencing.

Detection Guidance

This vulnerability is specific to the Linux kernel's SCSI target subsystem and requires kernel-level inspection. Check if your kernel version includes the vulnerable code by examining the target/iblock module. Use commands like 'modinfo target_core_mod' or 'lsmod | grep target_core_mod' to verify module presence. Inspect kernel logs for SCSI target errors with 'dmesg | grep -i target' or 'journalctl -k | grep -i target'.

Impact Analysis

This vulnerability could cause system crashes or instability in systems using the Linux kernel with SCSI target support. If exploited, it may lead to denial of service or unauthorized access to storage resources, depending on the system configuration and usage.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or other common standards and regulations as it is a low-level kernel issue related to SCSI target operations. Compliance impacts would depend on specific system configurations and usage, which are not detailed in the provided context.

Mitigation Strategies

Apply the latest kernel update from your distribution to patch the vulnerable function. If immediate patching is not possible, disable the SCSI target subsystem by unloading the 'target_core_mod' module with 'rmmod target_core_mod'. Ensure no critical services depend on this module before removal.

Hi! I’m here to help you understand CVE-2026-80691. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70