CVE-2026-98024: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folio_put() after error dmb->cpu_addr was allocated via folio_alloc(). Use folio_put() instead of kfree() in the error exit of ism_alloc_dmb() to avoid slab allocator corruption. While at it, reset dmb->cpu_addr after folio_put to avoid unintentional UAF by future callers.

Засегнати продукти

• Linux Linux: 121fb75414ab8debafd548bded9d888cd5a8f165 преди 90f6f5cb331af52b14c0f309fb27dc243e8e2982; 83781384a96b95e2b6403d3c8a002b2c89031770 преди 890e2ef726904d1d8328e4b9f5090eeb8761b9d1; 83781384a96b95e2b6403d3c8a002b2c89031770 преди eebb6a9017b55ac05be770cf7b89f9da49505ae7; 83781384a96b95e2b6403d3c8a002b2c89031770 преди 60983356fab0c1171c5cb1b56a36349ebadc608e; 83781384a96b95e2b6403d3c8a002b2c89031770 преди 907a56ab3eb8a58500a58daa76087f17bb2b6826; f3e23edc4917f72139b805f208aeadf23376a0b5; 6.6.29 преди 6.6.158; 6.8.8 преди 6.9
• Linux Linux: 6.9; преди 6.9; 6.6.158 до 6.6.*; 6.12.111 до 6.12.*; 6.18.53 до 6.18.*; 7.2.7 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-98024
• https://nvd.nist.gov/vuln/detail/CVE-2026-98024
• https://git.kernel.org/stable/c/90f6f5cb331af52b14c0f309fb27dc243e8e2982
• https://git.kernel.org/stable/c/890e2ef726904d1d8328e4b9f5090eeb8761b9d1
• https://git.kernel.org/stable/c/eebb6a9017b55ac05be770cf7b89f9da49505ae7
• https://git.kernel.org/stable/c/60983356fab0c1171c5cb1b56a36349ebadc608e
• https://git.kernel.org/stable/c/907a56ab3eb8a58500a58daa76087f17bb2b6826