AZL-108129 CVE-2026-98399 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dumpreipl without re-IPL parm block Unlike kdump, which passes the re-IPL parameter block through osinfo, the stand-alone dump passes it through the IPL parm block address and checksum in lowcore. Some...

CVE-2026-98399

The Linux kernel contains a vulnerability in the s390/ipl component where the dump_reipl_run() function performs a NULL dereference when an IPL parameter block is missing. This occurs with specific IPL types, such as HMC FTP boot or QEMU direct kernel boot , because reipl_block_actual remains NUL...

CVE-2026-98399 s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block

In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dumpreipl without re-IPL parm block Unlike kdump, which passes the re-IPL parameter block through osinfo, the stand-alone dump passes it through the IPL parm block address and checksum in lowcore. Some...

PT-2026-114378

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 architecture where the dump reipl run function unconditionally dereferences the reipl block actual variable when preparing lowcore fields. This occurs during...

CVE-2026-89459 s390/percpu: Fix MVIY_PERCPU() with older binutils

In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIYPERCPU with older binutils Commit a737737cdb9c "s390/percpu: Infrastructure for more efficient thiscpu operations" introduced MVIYPERCPU, which stringifies arguments that are already C string literals. This...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989555)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989555 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix NULL deref in qethclearworkingpoollist When qethsetonline calls...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping. Since identity mapping is fixed at address zero, lowcore is always mapped to address zero as well. This occurs regardless of the relocatelowcore command-line option. If the optio...

Linux Distros Unpatched Vulnerability : CVE-2025-38733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this...

SUSE CVE-2025-38733

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this happens regardless of the relocatelowcore command line option. If the...

DEBIAN-CVE-2025-38733

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this happens regardless of the relocatelowcore command line option. If the...

CVE-2025-38733

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this happens regardless of the relocatelowcore command line option. If the...

UBUNTU-CVE-2025-38733

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this happens regardless of the relocatelowcore command line option. If the...

CVE-2025-38733

CVE-2025-38733 affects the Linux kernel’s s390/mm subsystem: the identity mapping pins lowcore to address zero, causing lowcore to map at zero regardless of relocate_lowcore. If relocate_lowcore is used, the lowcore is mapped twice. This enables NULL pointer accesses that would not trigger an exc...

CVE-2025-38733 s390/mm: Do not map lowcore with identity mapping

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this happens regardless of the relocatelowcore command line option. If the...

CVE-2025-38733 s390/mm: Do not map lowcore with identity mapping

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this happens regardless of the relocatelowcore command line option. If the...

CVE-2025-38733: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this happens regardless of the relocatelowcore command line option. If the...

PT-2025-36263

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to memory management on s390 systems. The lowcore region was incorrectly mapped with the identity mapping, potentially leading to successful NUL...

CVE-2021-47369

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix NULL deref in qethclearworkingpoollist When qethsetonline calls qethclearworkingpoollist to roll back after an error exit from qethhardsetupcard, we are at risk of accessing card-qdio.inq before it was allocated by...

CVE-2021-47369 s390/qeth: fix NULL deref in qeth_clear_working_pool_list()

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix NULL deref in qethclearworkingpoollist When qethsetonline calls qethclearworkingpoollist to roll back after an error exit from qethhardsetupcard, we are at risk of accessing card-qdio.inq before it was allocated by...

CVE-2021-47369

The Linux kernel contains a NULL pointer dereference vulnerability in the qeth_clear_working_pool_list() function within the s390/qeth driver. The issue occurs when qeth_set_online() calls the vulnerable function during a rollback after an error in qeth_hardsetup_card(), specifically if card->...