CVE-2026-97593
In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX When using a 5-level translation table via ZPCI_TABLE_TYPE_RFX get_rso_from_iova() returns NULL when the region-first entry is invalid. Yet in get_rto_from_iova() the region-second origin rso is not checked to be non-NULL before accessing rso[rsx] leading to a NULL pointer dereference instead of a NULL return when iova_to_phys() is called on a unmapped IOVA. Fix this by adding the missing NULL check.
Affected versions
Linux kernel versions
6.16
and later are affected. Fixed in
6.18.53,
7.2.7,
7.3-rc3
and their respective stable series.
References
3 totalFrequently asked questions
-
What is CVE-2026-97593?
CVE-2026-97593 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.16 onward and has been patched in 6.18.53, 7.2.7 and 7.3-rc3. CVE-2026-97593 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-97593?
Yes. CVE-2026-97593 has been patched. Fixed versions include 6.18.53, 7.2.7 and 7.3-rc3. If you are running Linux kernel 6.16 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-97593 actively exploited?
No. CVE-2026-97593 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.