CVE-2026-98024
Received Received - Intake

s390/ism Folio Corruption via Improper Free in Linux Kernel

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: s390/ism: folio_put() after error dmb->cpu_addr was allocated via folio_alloc(). Use folio_put() instead of kfree() in the error exit of ism_alloc_dmb() to avoid slab allocator corruption. While at it, reset dmb->cpu_addr after folio_put to avoid unintentional UAF by future callers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-98024
EUVD
EUVD-2026-86677

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability where a memory management error occurs in the s390/ism driver. The issue involves using kfree() to free memory allocated via folio_alloc(), which can cause slab allocator corruption. The fix requires using folio_put() instead of kfree() in error handling paths and resetting a pointer to prevent use-after-free issues.

Detection Guidance

This vulnerability is specific to the Linux kernel's s390/ism subsystem and involves incorrect memory handling. Detection requires checking kernel logs for slab allocator corruption errors or examining the ism driver for improper memory management. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could lead to system instability, crashes, or potential privilege escalation if exploited. It may allow attackers to corrupt kernel memory, causing denial-of-service conditions or unauthorized access to sensitive data.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. Monitor kernel logs for slab corruption errors related to the ism driver. If you are using a vulnerable kernel version, update to a patched version immediately to prevent potential system instability or crashes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98024. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart