CVE-2026-98024

s390/ism: folio_put() after error

State: Published
Severity: Not scored
Published: Sep 25, 2026
Updated: Oct 19, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/ism: folio_put() after error

dmb->cpu_addr was allocated via folio_alloc(). Use folio_put() instead of kfree() in the error exit of ism_alloc_dmb() to avoid slab allocator corruption.

While at it, reset dmb->cpu_addr after folio_put to avoid unintentional UAF by future callers.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	121fb75414ab8debafd548bded9d888cd5a8f165 to before 90f6f5cb331af52b14c0f309fb27dc243e8e2982Affected 83781384a96b95e2b6403d3c8a002b2c89031770 to before 890e2ef726904d1d8328e4b9f5090eeb8761b9d1Affected 83781384a96b95e2b6403d3c8a002b2c89031770 to before eebb6a9017b55ac05be770cf7b89f9da49505ae7Affected 83781384a96b95e2b6403d3c8a002b2c89031770 to before 60983356fab0c1171c5cb1b56a36349ebadc608eAffected 83781384a96b95e2b6403d3c8a002b2c89031770 to before 907a56ab3eb8a58500a58daa76087f17bb2b6826Affected f3e23edc4917f72139b805f208aeadf23376a0b5Affected 6.6.29 to before 6.6.158Affected 6.8.8 to before 6.9Affected
LinuxLinux	6.9Affected before 6.9Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2.7 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

121fb75414ab8debafd548bded9d888cd5a8f165 to before 90f6f5cb331af52b14c0f309fb27dc243e8e2982Affected
83781384a96b95e2b6403d3c8a002b2c89031770 to before 890e2ef726904d1d8328e4b9f5090eeb8761b9d1Affected
83781384a96b95e2b6403d3c8a002b2c89031770 to before eebb6a9017b55ac05be770cf7b89f9da49505ae7Affected
83781384a96b95e2b6403d3c8a002b2c89031770 to before 60983356fab0c1171c5cb1b56a36349ebadc608eAffected
83781384a96b95e2b6403d3c8a002b2c89031770 to before 907a56ab3eb8a58500a58daa76087f17bb2b6826Affected
f3e23edc4917f72139b805f208aeadf23376a0b5Affected
6.6.29 to before 6.6.158Affected
6.8.8 to before 6.9Affected

LinuxLinux

6.9Affected
before 6.9Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2.7 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.