Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2026-80679

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasd_release_space() checks the implementation of the is_ese() discipline fun…

Published Aug 28, 2026EPSS 0.22%

Overview

CVE-2026-80679 is a known-severity vulnerability. It was published on August 28, 2026.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: Fix potential NULL pointer dereference

dasd_release_space() checks the implementation of the is_ese()

discipline function before calling it to determine if a given device is

an ESE DASD.

The current usage of the logical AND operator will lead to a NULL

pointer dereference as the function is called even if the function

pointer is NULL.

Fix this by using the logical OR operator.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refgit.kernel.org/stable/c/3000367a512b1283ca52230bf21f8c91dfbec45bRefgit.kernel.org/stable/c/3453a993a3f14c1684560ecf26585046976f6ac6Refgit.kernel.org/stable/c/86cdfd061509bcde84f3145f7221ba64e3e53b1fRefgit.kernel.org/stable/c/96b8e09b09539f252a5eeea6baebd93c2e3779bdRefgit.kernel.org/stable/c/9973026f572db6b67570cadc30942f3014e41079Refgit.kernel.org/stable/c/cdc7b73d0c5a9cd6360b4f8c36eae23b02097e4cRefgit.kernel.org/stable/c/dbf2ae34d2f1390a9fc1abf3dce7f809e022caaeRefgit.kernel.org/stable/c/e156c70c505c6c9adce3b7be5a82025f00544709

How CyberStrike helps

Frequently asked questions

What is CVE-2026-80679?

CVE-2026-80679 is a known-severity vulnerability. It was published on August 28, 2026.

How severe is CVE-2026-80679?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2026-80679?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2026-80679?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2026-80679 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999