All vulnerabilities
CVE-2026-98476

Linux: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in9d8b21820caed9128945fffcedf03e2a4c21eee2Also 5fc54e04dad90b15d0430118b3f288a1d64e66c9, 27e396a89f76f742abdbe9f8c4a58a6e806fdf59 and 3 moreCVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 9d8b21820caed9128945fffcedf03e2a4c21eee2LinuxCVE List
  • 5fc54e04dad90b15d0430118b3f288a1d64e66c9LinuxCVE List
  • 27e396a89f76f742abdbe9f8c4a58a6e806fdf59LinuxCVE List
  • 5e006ac90a4d331db1dd712b91fec849b45ffc01LinuxCVE List
  • 44b16b02608058fc72198ac0205969f0f43065dfLinuxCVE List
  • 5b76268dac968612f7283d59b539036de955b7d9LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()

The channel path registry entry associated with a CHPID may be removed while the subchannel's PMCW still references that CHPID. In this case, chpid_to_chp() can return NULL, leading to a NULL pointer dereference.

Add the missing NULL check before dereferencing the returned pointer.

Text from CVE List

Affected versions 18

  • Linuxaffected: 199652309a4d6635fca19d7528d73ab9e219bd9a before 9d8b21820caed9128945fffcedf03e2a4c21eee2CVE List
  • Linuxaffected: 199652309a4d6635fca19d7528d73ab9e219bd9a before 5fc54e04dad90b15d0430118b3f288a1d64e66c9CVE List
  • Linuxaffected: 199652309a4d6635fca19d7528d73ab9e219bd9a before 27e396a89f76f742abdbe9f8c4a58a6e806fdf59CVE List
  • Linuxaffected: 199652309a4d6635fca19d7528d73ab9e219bd9a before dbf30e661ceb9a52c94c85719716391dcc29142aCVE List
  • Linuxaffected: 199652309a4d6635fca19d7528d73ab9e219bd9a before 5e006ac90a4d331db1dd712b91fec849b45ffc01CVE List
  • Linuxaffected: 199652309a4d6635fca19d7528d73ab9e219bd9a before c3bbcb32deecc06ebb1762398399b566d5ff2fc9CVE List
  • Linuxaffected: 199652309a4d6635fca19d7528d73ab9e219bd9a before 44b16b02608058fc72198ac0205969f0f43065dfCVE List
  • Linuxaffected: 199652309a4d6635fca19d7528d73ab9e219bd9a before 5b76268dac968612f7283d59b539036de955b7d9CVE List
  • Linuxaffected: 4.18CVE List
  • Linuxunaffected: all versions before 4.18CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.55 through 6.18.*CVE List
  • Linuxunaffected: 7.2.9 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 8