CVE-2026-80697
Received Received - Intake

Null Pointer Dereference in Linux Kernel EROFS

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid f_path for page cache sharing Previously, backing files for page cache sharing were set up with f_path left as NULL (only f_inode was valid). It worked, but a recent mincore fix relies on f_path.mnt and crashes (found by "erofs/028" on 7.2-rc4): BUG: kernel NULL pointer dereference, address: 0000000000000018 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP PTI CPU: 3 UID: 0 PID: 675528 Comm: fincore Not tainted 7.2.0-rc4-00002-g[]-dirty #1 PREEMPT(lazy) Hardware name: Red Hat KVM, BIOS 1.16.0-4.al8 04/01/2014 RIP: 0010:__do_sys_mincore+0xc0/0x2c0 ... Specify valid paths using valid disconnected dentries together with erofs_ishare_mnt instead of leaving f_path empty, so they are more like real backing files in a pseudo filesystem and standard backing_file_open() can be used directly.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-09-17
AI Q&A
2026-08-28
EPSS Evaluated
2026-09-15
NVD
CVE-2026-80697
EUVD
EUVD-2026-67432

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel From 7.2.0-rc4 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a flaw in the erofs filesystem where backing files for page cache sharing were incorrectly set up with a NULL f_path. This caused a kernel crash when the mincore function tried to access f_path.mnt, leading to a NULL pointer dereference error.

Detection Guidance

This vulnerability is specific to the Linux kernel's erofs filesystem and may cause kernel crashes when mincore is used. Detection requires checking kernel logs for NULL pointer dereference errors related to mincore or erofs operations. Monitor system logs for oops messages or kernel panics.

Impact Analysis

This vulnerability can cause system crashes or instability when the mincore system call is used on filesystems with erofs. It may lead to kernel panics, data corruption, or denial of service if exploited.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel issue related to page cache sharing that could cause system crashes but does not involve data breaches or unauthorized access.

Mitigation Strategies

Apply the latest kernel patches that resolve this issue. If patches are unavailable, avoid using mincore on erofs filesystems until an update is applied. Monitor vendor advisories for kernel updates addressing this CVE.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80697. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart