CVE-2026-98593
Received Received - Intake

NULL pointer dereference in Linux kernel debug_info_copy

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix NULL pointer dereference in debug_info_copy() When debug_register_static() fails, it clears areas, active_pages and active_entries but leaves the area bounds unchanged. Copying such an area, either by opening its view file or via debug_dump(), makes debug_info_copy() dereference the NULL pointers. Skip the copy loop when the source has no areas.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98593
EUVD
EUVD-2026-103638

Affected Vendors & Products

Showing 8 associated CPEs
Vendor Product Version / Range
Linux Linux d72541f945127b4873dace501406a1bc8cd8e1e9
Linux Linux d72541f945127b4873dace501406a1bc8cd8e1e9
Linux Linux d72541f945127b4873dace501406a1bc8cd8e1e9
Linux Linux d72541f945127b4873dace501406a1bc8cd8e1e9
Linux Linux d72541f945127b4873dace501406a1bc8cd8e1e9
Linux Linux d72541f945127b4873dace501406a1bc8cd8e1e9
Linux Linux d72541f945127b4873dace501406a1bc8cd8e1e9
Linux Linux 5.15

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a NULL pointer dereference vulnerability in the Linux kernel's s390 debug subsystem. When debug_register_static() fails, it clears certain pointers but leaves area bounds unchanged. Copying such an area via debug_info_copy() can then cause the system to dereference NULL pointers, leading to a crash or potential code execution.

Detection Guidance

This vulnerability is specific to the Linux kernel's s390 debug subsystem. Detection requires checking the kernel version and verifying if the affected debug_info_copy() function is present. No direct commands are provided in the context to detect this issue.

Impact Analysis

This vulnerability could cause a kernel crash on affected systems, leading to denial of service. It may also potentially allow local attackers to escalate privileges or execute arbitrary code in the kernel context if exploited.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. If debug_register_static() failures are observed, avoid copying debug areas until the kernel is updated. Monitor kernel logs for NULL pointer dereference errors in the debug subsystem.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98593. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart