一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月25日

CVE-2026-98024 – In the Linux kernel, the following vulnerability has been resolved: s390/ism: folio_put()

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

s390/ism: folio_put() after error

dmb->cpu_addr was allocated via folio_alloc(). Use folio_put() instead of
kfree() in the error exit of ism_alloc_dmb() to avoid slab allocator
corruption.

While at it, reset dmb->cpu_addr after folio_put to avoid unintentional UAF
by future callers.