CVE-2026-98476: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()
Published Oct 18, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
s390/cio: Fix NULL pointer dereference in ccwdevicegetutilstr()
The channel path registry entry associated with a CHPID may be removed while the subchannel's PMCW still references that CHPID. In this case, chpidtochp() can return NULL, leading to a NULL pointer dereference.
Add the missing NULL check before dereferencing the returned pointer.
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In ccw_device_get_util_str(), add a NULL check for the pointer returned by chpid_to_chp() before dereferencing it.
Event History
Oct 18, 2026
CVE Published
via MITRE·03:15 PM
Data Sourced
via MITRE·03:15 PM
Description
Data Sourced
via NVD·04:16 PM
Description