CVE-2026-98651 PUBLISHED

KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()

Some callers pass NULL as oldkey. Calling page_cond_set_storage_key() will cause that NULL pointer to get dereferenced.

Fix by checking for NULL and assigning the pointer to a dummy local variable to avoid crashes.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 8e03e8316eb242af307d1c789d09f1a1457cf9a3 to 75867536746ab2d034488a6a93ee6cde83553342 (excl.)
  • affected from 8e03e8316eb242af307d1c789d09f1a1457cf9a3 to 88e22ffd1e46b95e40a6afabe486deb1d31a3ae1 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 7.0 is affected
  • unaffected from 0 to 7.0 (excl.)
  • unaffected from 7.2.9 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References