CVE-2026-98651

CVE-2026-98651

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()

Some callers pass NULL as oldkey. Calling page_cond_set_storage_key()

will cause that NULL pointer to get dereferenced.

Fix by checking for NULL and assigning the pointer to a dummy local

variable to avoid crashes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00155 · 4.3th percentile
Published
2026-10-18T20:17Z
References (2)
https://git.kernel.org/stable/c/75867536746ab2d034488a6a93ee6cde83553342 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/88e22ffd1e46b95e40a6afabe486deb1d31a3ae1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:20Z
    KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()
    cvelistv5
  • 18 OCT 15:20Z
    KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()
    cvelistv5