CVE-2026-80690: scsi: ufs: core: Initialize hba->rpmbs list in ufshcd
Published Aug 28, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Initialize hba->rpmbs list in ufshcd
Initialize the hba->rpmbs list in ufshcdallochost() to prevent NULL pointer dereference in the device teardown path if ufsrpmbprobe() fails.
Affected Software
1 affected component
The Linux Kernel Organization Linux kernel
Event History
Aug 28, 2026
CVE Published
via MITRE·06:52 AM
Data Sourced
via MITRE·06:52 AM
Description
Frequently Asked Questions
1
Which systems should prioritize validation for this fix?
Systems using the Linux kernel UFS subsystem, particularly those that use RPMB support, should validate the UFS device teardown path after an RPMB probe failure.
2
What is the observable impact if the affected path is reached?
A failed ufs_rpmb_probe() can leave the hba->rpmbs list uninitialized, causing a NULL pointer dereference during device teardown.
3
Are fixed kernel versions identified in the available information?
No affected or fixed kernel version numbers are provided. Two stable-kernel fix references are available: a29db0c7f69572b048a63698e1214842d72221e1 and 0279fd451a9971c0d5b959fc59f3e11b55e1694e.