CVE-2026-80690: scsi: ufs: core: Initialize hba->rpmbs list in ufshcd

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-28 · updated 2026-08-28

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Initialize hba->rpmbs list in ufshcd Initialize the hba->rpmbs list in ufshcd_alloc_host() to prevent NULL pointer dereference in the device teardown path if ufs_rpmb_probe() fails.

Affected products

Linux kernel: 6.19 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/0279fd451a9971c0d5b959fc59f3e11b55e1694e
https://git.kernel.org/stable/c/a29db0c7f69572b048a63698e1214842d72221e1

Get alerted when CVE-2026-80690 or the next vulnerability affects your stack