CVE-2026-98476 PUBLISHED

s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()

The channel path registry entry associated with a CHPID may be removed while the subchannel's PMCW still references that CHPID. In this case, chpid_to_chp() can return NULL, leading to a NULL pointer dereference.

Add the missing NULL check before dereferencing the returned pointer.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 199652309a4d6635fca19d7528d73ab9e219bd9a to 9d8b21820caed9128945fffcedf03e2a4c21eee2 (excl.)
  • affected from 199652309a4d6635fca19d7528d73ab9e219bd9a to 5fc54e04dad90b15d0430118b3f288a1d64e66c9 (excl.)
  • affected from 199652309a4d6635fca19d7528d73ab9e219bd9a to 27e396a89f76f742abdbe9f8c4a58a6e806fdf59 (excl.)
  • affected from 199652309a4d6635fca19d7528d73ab9e219bd9a to dbf30e661ceb9a52c94c85719716391dcc29142a (excl.)
  • affected from 199652309a4d6635fca19d7528d73ab9e219bd9a to 5e006ac90a4d331db1dd712b91fec849b45ffc01 (excl.)
  • affected from 199652309a4d6635fca19d7528d73ab9e219bd9a to c3bbcb32deecc06ebb1762398399b566d5ff2fc9 (excl.)
  • affected from 199652309a4d6635fca19d7528d73ab9e219bd9a to 44b16b02608058fc72198ac0205969f0f43065df (excl.)
  • affected from 199652309a4d6635fca19d7528d73ab9e219bd9a to 5b76268dac968612f7283d59b539036de955b7d9 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 4.18 is affected
  • unaffected from 0 to 4.18 (excl.)
  • unaffected from 5.10.271 to 5.10.* (incl.)
  • unaffected from 5.15.222 to 5.15.* (incl.)
  • unaffected from 6.1.189 to 6.1.* (incl.)
  • unaffected from 6.6.158 to 6.6.* (incl.)
  • unaffected from 6.12.112 to 6.12.* (incl.)
  • unaffected from 6.18.55 to 6.18.* (incl.)
  • unaffected from 7.2.9 to 7.2.* (incl.)
  • unaffected from 7.3-rc5 to * (incl.)

References