CVE-2026-74690

A flaw was found in the Linux kernel's s390/ism component. An interrupt handler could concurrently access data structures sba and ieq that have already been freed during the ismdevexit process. This Use-After-Free UAF vulnerability could lead to system instability or potentially allow for privile...

SUSE CVE-2026-98024

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator corruption. While at it, reset dmb-cpuaddr after folioput to avoid...

DEBIAN-CVE-2026-98024

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator corruption. While at it, reset dmb-cpuaddr after folioput to avoid...

UBUNTU-CVE-2026-98024

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator corruption. While at it, reset dmb-cpuaddr after folioput to avoid...

CVE-2026-98024 s390/ism: folio_put() after error

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator corruption. While at it, reset dmb-cpuaddr after folioput to avoid...

EUVD-2026-86677

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator corruption. While at it, reset dmb-cpuaddr after folioput to avoid...

CVE-2026-98024

A vulnerability exists in the Linux kernel (s390/ism) where the ism_alloc_dmb() function incorrectly used kfree() instead of folio_put() during an error exit for memory allocated via folio_alloc(). This flaw could lead to slab allocator corruption . The fix involves using folio_put() and resettin...

CVE-2026-98024 s390/ism: folio_put() after error

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator corruption. While at it, reset dmb-cpuaddr after folioput to avoid...

CVE-2026-98024

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator corruption. While at it, reset dmb-cpuaddr after folioput to avoid...

CVE-2026-98024: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator corruption. While at it, reset dmb-cpuaddr after folioput to avoid...

PT-2026-98687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/ism component where dmb-cpu addr is allocated using folio alloc. The ism alloc dmb function incorrectly uses kfree instead of folio put during error exits,...

Linux Distros Unpatched Vulnerability : CVE-2026-98024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator...

SUSE CVE-2026-74690

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...

CVE-2026-74690

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...

UBUNTU-CVE-2026-74690

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...

CVE-2026-74690

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...

CVE-2026-74690 s390/ism: Fix UAF of sba and ieq during ism_dev_exit()

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...

EUVD-2026-64377

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...

CVE-2026-74690

CVE-2026-74690 is a Use-After-Free (UAF) vulnerability in the Linux kernel's s390/ism (Integrated Service Management) driver. During ism_dev_exit(), an active ISM interrupt handler can access the sba and ieq data structures after they have been freed. The fix calls free_irq() to drain in-flight i...

CVE-2026-74690 s390/ism: Fix UAF of sba and ieq during ism_dev_exit()

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...