Linux Kernel Vulnerability Affecting s390/dasd by Linux Foundation

CVE-2026-80679

What is CVE-2026-80679?

In the Linux kernel, a vulnerability was found in the s390/dasd subsystem that could lead to a NULL pointer dereference due to improper checks in the dasd_release_space() function. The misuse of the logical AND operator in this context allowed calls to a function pointer that was potentially NULL, which could result in application crashes or unpredictable behavior. This issue has been addressed by modifying the logic to use the logical OR operator, thereby preventing the dereference risk. Users are advised to update their Linux kernel to the latest version to mitigate this vulnerability.

References