CVE-2026-80679 (GCVE-0-2026-80679)
Vulnerability from cvelistv5
Published
2026-08-28 06:52
Modified
2026-08-28 06:52
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasd_release_space() checks the implementation of the is_ese() discipline function before calling it to determine if a given device is an ESE DASD. The current usage of the logical AND operator will lead to a NULL pointer dereference as the function is called even if the function pointer is NULL. Fix this by using the logical OR operator.
References
Impacted products
Vendor Product Version
Linux Linux Version: 91dc4a197569230683ca8bad551e655a4bf14c30
Version: 91dc4a197569230683ca8bad551e655a4bf14c30
Version: 91dc4a197569230683ca8bad551e655a4bf14c30
Version: 91dc4a197569230683ca8bad551e655a4bf14c30
Version: 91dc4a197569230683ca8bad551e655a4bf14c30
Version: 91dc4a197569230683ca8bad551e655a4bf14c30
Version: 91dc4a197569230683ca8bad551e655a4bf14c30
Version: 91dc4a197569230683ca8bad551e655a4bf14c30
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/s390/block/dasd_ioctl.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "dbf2ae34d2f1390a9fc1abf3dce7f809e022caae",
              "status": "affected",
              "version": "91dc4a197569230683ca8bad551e655a4bf14c30",
              "versionType": "git"
            },
            {
              "lessThan": "3000367a512b1283ca52230bf21f8c91dfbec45b",
              "status": "affected",
              "version": "91dc4a197569230683ca8bad551e655a4bf14c30",
              "versionType": "git"
            },
            {
              "lessThan": "cdc7b73d0c5a9cd6360b4f8c36eae23b02097e4c",
              "status": "affected",
              "version": "91dc4a197569230683ca8bad551e655a4bf14c30",
              "versionType": "git"
            },
            {
              "lessThan": "e156c70c505c6c9adce3b7be5a82025f00544709",
              "status": "affected",
              "version": "91dc4a197569230683ca8bad551e655a4bf14c30",
              "versionType": "git"
            },
            {
              "lessThan": "3453a993a3f14c1684560ecf26585046976f6ac6",
              "status": "affected",
              "version": "91dc4a197569230683ca8bad551e655a4bf14c30",
              "versionType": "git"
            },
            {
              "lessThan": "86cdfd061509bcde84f3145f7221ba64e3e53b1f",
              "status": "affected",
              "version": "91dc4a197569230683ca8bad551e655a4bf14c30",
              "versionType": "git"
            },
            {
              "lessThan": "96b8e09b09539f252a5eeea6baebd93c2e3779bd",
              "status": "affected",
              "version": "91dc4a197569230683ca8bad551e655a4bf14c30",
              "versionType": "git"
            },
            {
              "lessThan": "9973026f572db6b67570cadc30942f3014e41079",
              "status": "affected",
              "version": "91dc4a197569230683ca8bad551e655a4bf14c30",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/s390/block/dasd_ioctl.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.3"
            },
            {
              "lessThan": "5.3",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.265",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.216",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.183",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.151",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.265",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.216",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.183",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.151",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.103",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.44",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.8",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: Fix potential NULL pointer dereference\n\ndasd_release_space() checks the implementation of the is_ese()\ndiscipline function before calling it to determine if a given device is\nan ESE DASD.\n\nThe current usage of the logical AND operator will lead to a NULL\npointer dereference as the function is called even if the function\npointer is NULL.\n\nFix this by using the logical OR operator."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-28T06:52:47.682Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/dbf2ae34d2f1390a9fc1abf3dce7f809e022caae"
        },
        {
          "url": "https://git.kernel.org/stable/c/3000367a512b1283ca52230bf21f8c91dfbec45b"
        },
        {
          "url": "https://git.kernel.org/stable/c/cdc7b73d0c5a9cd6360b4f8c36eae23b02097e4c"
        },
        {
          "url": "https://git.kernel.org/stable/c/e156c70c505c6c9adce3b7be5a82025f00544709"
        },
        {
          "url": "https://git.kernel.org/stable/c/3453a993a3f14c1684560ecf26585046976f6ac6"
        },
        {
          "url": "https://git.kernel.org/stable/c/86cdfd061509bcde84f3145f7221ba64e3e53b1f"
        },
        {
          "url": "https://git.kernel.org/stable/c/96b8e09b09539f252a5eeea6baebd93c2e3779bd"
        },
        {
          "url": "https://git.kernel.org/stable/c/9973026f572db6b67570cadc30942f3014e41079"
        }
      ],
      "title": "s390/dasd: Fix potential NULL pointer dereference",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-80679",
    "datePublished": "2026-08-28T06:52:47.682Z",
    "dateReserved": "2026-08-26T14:34:25.783Z",
    "dateUpdated": "2026-08-28T06:52:47.682Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.