CVE-2026-98651
KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 7.2.9
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key() Some callers pass NULL as oldkey. Calling page_cond_set_storage_key() will cause that NULL pointer to get dereferenced. Fix by checking for NULL and assigning the pointer to a dummy local variable to avoid crashes.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 8e03e8316eb242af307d1c789d09f1a1457cf9a3 · fixed in 75867536746ab2d034488a6a93ee6cde83553342; From 8e03e8316eb242af307d1c789d09f1a1457cf9a3 · fixed in 88e22ffd1e46b95e40a6afabe486deb1d31a3ae1
- Linux Linux
7.0
- KernelLinux
From 7.0.0 · fixed in 7.2.9