CVE-2026-97506
Received Received - Intake

Null Pointer Dereference in Linux Kernel Crypto IXP4XX

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: crypto: ixp4xx - fix buffer chain unwind on allocation failure chainup_buffers() builds a linked list of buffer descriptors for a scatterlist. If dma_pool_alloc() fails while constructing the list, the current code sets buf to NULL and later dereferences it unconditionally at the end of the function: buf->next = NULL; buf->phys_next = 0; This can lead to a null-pointer dereference on allocation failure. If the failure happens after part of the descriptor chain has already been allocated and DMA-mapped, the partially constructed chain also needs to be released. Fix this by terminating the partially constructed chain on allocation failure and letting the callers unwind it via their existing cleanup paths. Also fix ablk_perform() to preserve the hook pointers before checking for failure, so partially built chains can be freed correctly.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-97506
EUVD
EUVD-2026-86104

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a null-pointer dereference vulnerability in the Linux kernel's crypto subsystem, specifically in the ixp4xx driver. It occurs when the chainup_buffers() function fails to allocate memory for buffer descriptors. The function incorrectly dereferences a NULL pointer when unwinding after allocation failure, leading to a crash.

Detection Guidance

This vulnerability is specific to the Linux kernel's crypto subsystem (ixp4xx driver) and may not have direct network detection methods. Check kernel logs for errors related to crypto operations or DMA failures using commands like dmesg | grep -i crypto or journalctl -k | grep -i dma.

Impact Analysis

If exploited, this vulnerability could cause a system crash or kernel panic, leading to denial of service. It may also allow local attackers to escalate privileges if combined with other vulnerabilities. Systems using affected Linux kernel versions with ixp4xx crypto support are at risk.

Mitigation Strategies

Update the Linux kernel to the latest patched version that includes the fix for this vulnerability. Monitor kernel logs for related errors and ensure proper error handling in crypto operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97506. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart