CVE-2026-97593
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX When using a 5-level translation table via ZPCI_TABLE_TYPE_RFX get_rso_from_iova() returns NULL when the region-first entry is invalid. Yet in get_rto_from_iova() the region-second origin rso is not checked to be non-NULL before accessing rso[rsx] leading to a NULL pointer dereference instead of a NULL return when iova_to_phys() is called on a unmapped IOVA. Fix this by adding the missing NULL check.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 25, 2026
First seenSep 25, 2026
How to fix
Update
- Linux Linuxd0502ed0a1aae97e2ab7a21545903ba612d9f02e, 41b5e0ce6801bf04d8fd3bca46e8c393349ebd5c, 20db6573301e66cd65ebf6c130b6563c69374d9d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 81244074b518aeb90de5f68e7e825564c29c5c50 ≤ v < d0502ed0a1aae97e2ab7a21545903ba612d9f02e, 81244074b518aeb90de5f68e7e825564c29c5c50 ≤ v < 41b5e0ce6801bf04d8fd3bca46e8c393349ebd5c, 81244074b518aeb90de5f68e7e825564c29c5c50 ≤ v < 20db6573301e66cd65ebf6c130b6563c69374d9d, 6.16 | d0502ed0a1aae97e2ab7a21545903ba612d9f02e, 41b5e0ce6801bf04d8fd3bca46e8c393349ebd5c, 20db6573301e66cd65ebf6c130b6563c69374d9d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.