Linux Kernel Vulnerability in UFS Core Component

CVE-2026-80690

What is CVE-2026-80690?

A vulnerability in the Linux kernel's UFS core has been identified where the hba->rpmbs list is not properly initialized within the ufshcd_alloc_host() function. This oversight can lead to a NULL pointer dereference during the device teardown process if the ufs_rpmb_probe() function fails. Such a failure poses a risk of system instability and could potentially be exploited in specific scenarios, underscoring the importance of updating to the patched versions.

References