CVE-2026-80691 scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE
A null pointer dereference in the Linux kernel SCSI target iblock driver allows attackers to cause a denial of service via crafted Persistent Reservation operations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-80691?
CVE-2026-80691 is a high-severity vulnerability in Linux, published on 28 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE
In the iblock_execute_pr_out() function, PRO_PREEMPT, PRO_PREEMPT_AND_ABORT, and PRO_RELEASE all perform callback capability checks through ops->pr_clear. The error check allows unimplemented hooks to pass through the gate, resulting dereferencing a NULL function pointer.
Check whether the hooks that need to be called are supported.
Which versions are affected by CVE-2026-80691?
How do I fix CVE-2026-80691?
Apply the vendor's patch.
Is CVE-2026-80691 being exploited?
There is no known exploitation of CVE-2026-80691 in the wild and no public exploit code.
Sources
Also known as AZL-98072, BELL-CVE-2026-80691, DEBIAN-CVE-2026-80691, GHSA-mp2w-vvvm-2m46, UBUNTU-CVE-2026-80691.