What’s Vulnerable › Vulnerabilities

CVE-2026-80691: scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-28 · updated 2026-10-16

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE In the iblock_execute_pr_out() function, PRO_PREEMPT, PRO_PREEMPT_AND_ABORT, and PRO_RELEASE all perform callback capability checks through ops->pr_clear. The error check allows unimplemented hooks to pass through the gate, resulting dereferencing a NULL function pointer. Check whether the hooks that need to be called are supported.

Affected products

• Linux kernel: 6.5 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3c60a8b4037dc35e365658fcbcb349a5d742ff49
• https://git.kernel.org/stable/c/9c33222bd387312874fbe36ca8002e5c945b9653
• https://git.kernel.org/stable/c/a326b19cfb7775378b50acaa8d836ba44e29b4c2
• https://git.kernel.org/stable/c/bdd8a1297ef101bb5ac57e53b4fbe5e364afd8b1
• https://git.kernel.org/stable/c/f15bcf9a99b1b2683fcfa005b9b3680b5600581f

Get alerted when CVE-2026-80691 or the next vulnerability affects your stack