CVE-2026-98024

Summary

In the Linux kernel, the following vulnerability has been resolved:

s390/ism: folio_put() after error

dmb->cpu_addr was allocated via folio_alloc(). Use folio_put() instead of kfree() in the error exit of ism_alloc_dmb() to avoid slab allocator corruption.

While at it, reset dmb->cpu_addr after folio_put to avoid unintentional UAF by future callers.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux83781384a96b95e2b6403d3c8a002b2c89031770 < 890e2ef726904d1d8328e4b9f5090eeb8761b9d1affected
LinuxLinux83781384a96b95e2b6403d3c8a002b2c89031770 < eebb6a9017b55ac05be770cf7b89f9da49505ae7affected
LinuxLinux83781384a96b95e2b6403d3c8a002b2c89031770 < 60983356fab0c1171c5cb1b56a36349ebadc608eaffected
LinuxLinux83781384a96b95e2b6403d3c8a002b2c89031770 < 907a56ab3eb8a58500a58daa76087f17bb2b6826affected
LinuxLinux121fb75414ab8debafd548bded9d888cd5a8f165affected
LinuxLinuxf3e23edc4917f72139b805f208aeadf23376a0b5affected
LinuxLinux6.6.29 < 6.7affected
LinuxLinux6.8.8 < 6.9affected
LinuxLinux6.9affected
LinuxLinux0 < 6.9unaffected
LinuxLinux6.12.111 <= 6.12.*unaffected
LinuxLinux6.18.53 <= 6.18.*unaffected
LinuxLinux7.2.7 <= 7.2.*unaffected
LinuxLinux7.3-rc3 <= *unaffected

Weaknesses

References