CVE-2026-98024
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: s390/ism: folio_put() after error dmb->cpu_addr was allocated via folio_alloc(). Use folio_put() instead of kfree() in the error exit of ism_alloc_dmb() to avoid slab allocator corruption. While at it, reset dmb->cpu_addr after folio_put to avoid unintentional UAF by future callers.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 25, 2026
First seenSep 25, 2026
How to fix
Update
- Linux Linux90f6f5cb331af52b14c0f309fb27dc243e8e2982, 890e2ef726904d1d8328e4b9f5090eeb8761b9d1, eebb6a9017b55ac05be770cf7b89f9da49505ae7, 60983356fab0c1171c5cb1b56a36349ebadc608e, 907a56ab3eb8a58500a58daa76087f17bb2b6826, 6.6.158, 6.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 121fb75414ab8debafd548bded9d888cd5a8f165 ≤ v < 90f6f5cb331af52b14c0f309fb27dc243e8e2982, 83781384a96b95e2b6403d3c8a002b2c89031770 ≤ v < 890e2ef726904d1d8328e4b9f5090eeb8761b9d1, 83781384a96b95e2b6403d3c8a002b2c89031770 ≤ v < eebb6a9017b55ac05be770cf7b89f9da49505ae7, 83781384a96b95e2b6403d3c8a002b2c89031770 ≤ v < 60983356fab0c1171c5cb1b56a36349ebadc608e, 83781384a96b95e2b6403d3c8a002b2c89031770 ≤ v < 907a56ab3eb8a58500a58daa76087f17bb2b6826, f3e23edc4917f72139b805f208aeadf23376a0b5, 6.6.29 ≤ v < 6.6.158, 6.8.8 ≤ v < 6.9, 6.9 | 90f6f5cb331af52b14c0f309fb27dc243e8e2982, 890e2ef726904d1d8328e4b9f5090eeb8761b9d1, eebb6a9017b55ac05be770cf7b89f9da49505ae7, 60983356fab0c1171c5cb1b56a36349ebadc608e, 907a56ab3eb8a58500a58daa76087f17bb2b6826, 6.6.158, 6.9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.