# block: stop the timeout timer when releasing a never added disk

CVE record · `CVE-2026-80589`

- **Identifiers:** `CVE-2026-80589`
- **State:** Confirmed
- **Severity:** CVSS 9.8 Critical
- **Critical:** Yes: CVSS 9+
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 26 Aug 2026
- **Updated:** 16 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 26 Aug 2026, 14:37 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Critical

Critical, because:

- CVSS score 9.8: 9.0 or more.

How we decide what’s critical: <https://agentprime.io/advisories/critical.md>

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `6f8191fdf41d3a53cc1d63fe2234e812c55a0092 to before 6ae7364f68e6c7af6b6df4bbb14040b89e5975d0` (git)
  - affected: `6f8191fdf41d3a53cc1d63fe2234e812c55a0092 to before 6f06dbe5012c160e0dba418a5a9cb16c456ad46a` (git)
  - affected: `6f8191fdf41d3a53cc1d63fe2234e812c55a0092 to before 1a0ae4d502062a2759f2a92d12bdeab3c64c7372` (git)
  - affected: `6f8191fdf41d3a53cc1d63fe2234e812c55a0092 to before bb03b56d1d754908a37a160603be21769da423cf` (git)
  - affected: `6f8191fdf41d3a53cc1d63fe2234e812c55a0092 to before 93d620519d71dfc6ee64b5baea74f1d85d4439fb` (git)
  - affected: `6f8191fdf41d3a53cc1d63fe2234e812c55a0092 to before 26cb8ebbfaf713c82e142d08828d4d765057633b` (git)
  - affected: `d27b66257db183fe11c10f31246ae965adb005d3` (git)
  - affected: `5.19.12 to before 5.20` (semver)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `6.0`
  - unaffected: `before 6.0` (semver)
  - unaffected: `6.1.184 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.153 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.105 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.46 to 6.18.*, inclusive` (semver)
  - unaffected: `7.1.10 to 7.1.*, inclusive` (semver)
  - unaffected: `7.2 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 9.8 Critical, CVSS 3.1: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0037, the 31st percentile, on 15 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 26 Aug 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-80589](https://www.cve.org/CVERecord?id=CVE-2026-80589)
- [NVD: CVE-2026-80589](https://nvd.nist.gov/vuln/detail/CVE-2026-80589)

### References from the CNA

- <https://git.kernel.org/stable/c/6ae7364f68e6c7af6b6df4bbb14040b89e5975d0>
- <https://git.kernel.org/stable/c/6f06dbe5012c160e0dba418a5a9cb16c456ad46a>
- <https://git.kernel.org/stable/c/1a0ae4d502062a2759f2a92d12bdeab3c64c7372>
- <https://git.kernel.org/stable/c/bb03b56d1d754908a37a160603be21769da423cf>
- <https://git.kernel.org/stable/c/93d620519d71dfc6ee64b5baea74f1d85d4439fb>
- <https://git.kernel.org/stable/c/26cb8ebbfaf713c82e142d08828d4d765057633b>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-80589>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-80589/>. Everything for agents: <https://agentprime.io/llms.txt>.