CVE-2026-98651
Linux: KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in75867536746ab2d034488a6a93ee6cde83553342Also 88e22ffd1e46b95e40a6afabe486deb1d31a3ae1CVE List
What fixes it
- 75867536746ab2d034488a6a93ee6cde83553342LinuxCVE List
- 88e22ffd1e46b95e40a6afabe486deb1d31a3ae1LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()
Some callers pass NULL as oldkey. Calling page_cond_set_storage_key() will cause that NULL pointer to get dereferenced.
Fix by checking for NULL and assigning the pointer to a dummy local variable to avoid crashes.
Text from CVE List
Affected versions 6
- Linuxaffected: 8e03e8316eb242af307d1c789d09f1a1457cf9a3 before 75867536746ab2d034488a6a93ee6cde83553342CVE List
- Linuxaffected: 8e03e8316eb242af307d1c789d09f1a1457cf9a3 before 88e22ffd1e46b95e40a6afabe486deb1d31a3ae1CVE List
- Linuxaffected: 7.0CVE List
- Linuxunaffected: all versions before 7.0CVE List
- Linuxunaffected: 7.2.9 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List