Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98024

s390/ism: folio_put() after error

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folio_put() after error dmb->cpu_addr was allocated via folio_alloc(). Use folio_put() instead of kfree() in the error exit of ism_alloc_dmb() to avoid slab allocator corruption. While at it, reset dmb->cpu_addr after folio_put to avoid unintentional UAF by future callers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 121fb75414ab8debafd548bded9d888cd5a8f165 to < 90f6f5cb331af52b14c0f309fb27dc243e8e2982affected
  • 83781384a96b95e2b6403d3c8a002b2c89031770 to < 890e2ef726904d1d8328e4b9f5090eeb8761b9d1affected
  • 83781384a96b95e2b6403d3c8a002b2c89031770 to < eebb6a9017b55ac05be770cf7b89f9da49505ae7affected
  • 83781384a96b95e2b6403d3c8a002b2c89031770 to < 60983356fab0c1171c5cb1b56a36349ebadc608eaffected
  • 83781384a96b95e2b6403d3c8a002b2c89031770 to < 907a56ab3eb8a58500a58daa76087f17bb2b6826affected
  • f3e23edc4917f72139b805f208aeadf23376a0b5affected
  • 6.6.29 to < 6.6.158affected
  • 6.8.8 to < 6.9affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2.7 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References