SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80691

HIGH · CVSS 7.5 EPSS 0.45%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel's iblock_execute_pr_out() function allows unimplemented callback hooks to bypass checks, potentially leading to dereferencing a NULL function pointer. This flaw could lead to system instability or crashes, impacting systems that rely on SCSI target operations. Organizations using affected Linux distributions should prioritize patching to mitigate potential disruptions.

CVE
CVE-2026-80691
Severity
HIGH
CVSS
7.5
EPSS
0.45%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE In the iblock_execute_pr_out() function, PRO_PREEMPT, PRO_PREEMPT_AND_ABORT, and PRO_RELEASE all perform callback capability checks through ops->pr_clear. The error check allows unimplemented hooks to pass through the gate, resulting dereferencing a NULL function pointer. Check whether the hooks that need to be called are supported.