CVE-2026-80679
Published Aug 28, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasd_release_space() checks the implementation of the is_ese() discipline function before calling it to determine if a given device is an ESE DASD. The current usage of the logical AND operator will lead to a NULL pointer dereference as the function is called even if the function pointer is NULL. Fix this by using the logical OR operator.
Is your site exposed to CVE-2026-80679?
Run a free security scan — no signup, results in seconds.
EPSS — Exploit Prediction
0.0018
Probability of exploitation
0.07%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
References
Other References
https://git.kernel.org/stable/c/3000367a512b1283ca52230bf21f8c91dfbec45b
https://git.kernel.org/stable/c/3453a993a3f14c1684560ecf26585046976f6ac6
https://git.kernel.org/stable/c/86cdfd061509bcde84f3145f7221ba64e3e53b1f
https://git.kernel.org/stable/c/96b8e09b09539f252a5eeea6baebd93c2e3779bd
https://git.kernel.org/stable/c/9973026f572db6b67570cadc30942f3014e41079
https://git.kernel.org/stable/c/cdc7b73d0c5a9cd6360b4f8c36eae23b02097e4c
https://git.kernel.org/stable/c/dbf2ae34d2f1390a9fc1abf3dce7f809e022caae
https://git.kernel.org/stable/c/e156c70c505c6c9adce3b7be5a82025f00544709
Frequently Asked Questions
What is CVE-2026-80679? +
In the Linux kernel, the following vulnerability has been resolved:
s390/dasd: Fix potential NULL pointer dereference
dasd_release_space() checks the implementation of the is_ese()
discipline function before calling it to determine if a given device is
an ESE DASD.
The current usage of the logical AND operator will lead to a NULL
pointer dereference as the function is called even if the function
pointer is NULL.
Fix this by using the logical OR operator.
How do I check if I'm vulnerable to CVE-2026-80679? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.