CVE-2026-97980s390/debug: Fix NULL pointer dereference in debug_set_level()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix NULL pointer dereference in debug_set_level() Commit a2cec6863709 ("s390/debug: Add s390dbf kernel parameter") incorrectly removed a null-id check from debug_set_level(), introducing a possible NULL pointer dereference for debug-API users that put debug_register() results unchecked into debug_set_level(). Fix this by moving the check from the internal _debug_set_level() variant back to the external debug_set_level() wrapper.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from a2cec6863709d6673a025acc066c962b85a75842 before 716e1cd3783806929407dbd596e6b1118971eb9e; from a2cec6863709d6673a025acc066c962b85a75842 before b1eb31d533cdfcae1011ed53850d52f36afe5774 | CNA record |
References
- https://git.kernel.org/stable/c/716e1cd3783806929407dbd596e6b1118971eb9e
- https://git.kernel.org/stable/c/b1eb31d533cdfcae1011ed53850d52f36afe5774
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.