In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist() When a host issues an Identify command with CNS 07h (Active Namespace ID List for a specific I/O Command Set), nvmet_execute_identify_nslist() is called with match_css set. The command-set filter dereferences req->ns, but this handler never calls nvmet_req_find_ns(), so req->ns is always NULL (nvmet_req_init() resets it to NULL). As soon as an enabled namespace with an NSID greater than the requested value exists, req->ns->csi dereferences a NULL pointer and oopses. Besides the crash, the comparison is logically wrong: to filter the list by command set it must test the command set of the namespace being iterated, not a single fixed value. Use the loop variable ns->csi.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in
    nvmet_execute_identify_nslist() When a host issues an Identify command with CNS 07h (Active Namespace ID
    List for a specific I/O Command Set), nvmet_execute_identify_nslist() is called with match_css set. The
    command-set filter dereferences req->ns, but this handler never calls nvmet_req_find_ns(), so req->ns is
    always NULL (nvmet_req_init() resets it to NULL). As soon as an enabled namespace with an NSID greater
    than the requested value exists, req->ns->csi dereferences a NULL pointer and oopses. Besides the crash,
    the comparison is logically wrong: to filter the list by command set it must test the command set of the
    namespace being iterated, not a single fixed value. Use the loop variable ns->csi. (CVE-2026-80813)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist() When a host issues an Identify     command with CNS 07h (Active Namespace ID List for a specific I/O Command Set),     nvmet_execute_identify_nslist() is called with match_css set. The command-set filter dereferences req->ns,     but this handler never calls nvmet_req_find_ns(), so req->ns is always NULL (nvmet_req_init() resets it to     NULL). As soon as an enabled namespace with an NSID greater than the requested value exists, req->ns->csi     dereferences a NULL pointer and oopses. Besides the crash, the comparison is logically wrong: to filter     the list by command set it must test the command set of the namespace being iterated, not a single fixed     value. Use the loop variable ns->csi. (CVE-2026-80813)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
470730	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20098.0.0	Tenable Cloud Security	Google COS Security Checks	Local	medium
470730	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20098.0.0	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	medium
470189	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.28	Tenable Cloud Security	Google COS Security Checks	Local	medium
470189	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.28	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	medium
350138	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21910-1)	Nessus	SuSE Local Security Checks	Local	high
343470	Linux Distros Unpatched Vulnerability : CVE-2026-80813	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-80813

medium

Tenable Plugins

medium

medium

medium

medium

high

medium