Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98476

s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() The channel path registry entry associated with a CHPID may be removed while the subchannel's PMCW still references that CHPID. In this case, chpid_to_chp() can return NULL, leading to a NULL pointer dereference. Add the missing NULL check before dereferencing the returned pointer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 199652309a4d6635fca19d7528d73ab9e219bd9a to < 9d8b21820caed9128945fffcedf03e2a4c21eee2affected
  • 199652309a4d6635fca19d7528d73ab9e219bd9a to < 5fc54e04dad90b15d0430118b3f288a1d64e66c9affected
  • 199652309a4d6635fca19d7528d73ab9e219bd9a to < 27e396a89f76f742abdbe9f8c4a58a6e806fdf59affected
  • 199652309a4d6635fca19d7528d73ab9e219bd9a to < dbf30e661ceb9a52c94c85719716391dcc29142aaffected
  • 199652309a4d6635fca19d7528d73ab9e219bd9a to < 5e006ac90a4d331db1dd712b91fec849b45ffc01affected
  • 199652309a4d6635fca19d7528d73ab9e219bd9a to < c3bbcb32deecc06ebb1762398399b566d5ff2fc9affected
  • 199652309a4d6635fca19d7528d73ab9e219bd9a to < 44b16b02608058fc72198ac0205969f0f43065dfaffected
  • 199652309a4d6635fca19d7528d73ab9e219bd9a to < 5b76268dac968612f7283d59b539036de955b7d9affected

Linux Linux

Default version status: affected

  • 4.18affected
  • 0 to < 4.18unaffected
  • 5.10.271 to ≤ 5.10.*unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.112 to ≤ 6.12.*unaffected
  • 6.18.55 to ≤ 6.18.*unaffected
  • 7.2.9 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References