All vulnerabilities
CVE-2026-97980

Linux: s390/debug: Fix NULL pointer dereference in debug_set_level()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in716e1cd3783806929407dbd596e6b1118971eb9eFixed versionCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 716e1cd3783806929407dbd596e6b1118971eb9eLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/debug: Fix NULL pointer dereference in debug_set_level()

Commit a2cec6863709 ("s390/debug: Add s390dbf kernel parameter") incorrectly removed a null-id check from debug_set_level(), introducing a possible NULL pointer dereference for debug-API users that put debug_register() results unchecked into debug_set_level().

Fix this by moving the check from the internal _debug_set_level() variant back to the external debug_set_level() wrapper.

Text from CVE List

Affected versions 6

  • Linuxaffected: a2cec6863709d6673a025acc066c962b85a75842 before 716e1cd3783806929407dbd596e6b1118971eb9eCVE List
  • Linuxaffected: a2cec6863709d6673a025acc066c962b85a75842 before b1eb31d533cdfcae1011ed53850d52f36afe5774CVE List
  • Linuxaffected: 7.2CVE List
  • Linuxunaffected: all versions before 7.2CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 2