« Volver al listado

CVE-2026-89457

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: Guard sysfs discipline callbacks against unallocated private data

Several sysfs show/store handlers call a discipline callback that dereferences device->private, either directly or through the DASD_DEFINE_ATTR() macro. During dasd_generic_set_online() the discipline is assigned before check_device() allocates device->private, so an unprivileged read of one of these world-readable attributes in that window dereferences a NULL pointer and panics.

Guard the dereference inside each callback that actually touches device->private.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-89457",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "c729696bcf8b23450043dd9c9972c15e53419ae4",
              "lessThan": "644b666c202cce12ccfcf9ded67089b18f4f7659",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c729696bcf8b23450043dd9c9972c15e53419ae4",
              "lessThan": "4a042d8e5f34282577ece50515cea8bb1246914d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c729696bcf8b23450043dd9c9972c15e53419ae4",
              "lessThan": "bd8b4572528f9604a13bf3c7c2a167f5cf222f72",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c729696bcf8b23450043dd9c9972c15e53419ae4",
              "lessThan": "57db27ccc162afe0726cffec0ae62e410ed2d0e9",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c729696bcf8b23450043dd9c9972c15e53419ae4",
              "lessThan": "536407b272402af679155910d7fdeeb4834eefb9",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c729696bcf8b23450043dd9c9972c15e53419ae4",
              "lessThan": "6452c13646af7c13d7f6668b6690cfb2427e7f7b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c729696bcf8b23450043dd9c9972c15e53419ae4",
              "lessThan": "449f3bada7a9fad8b8cdf4bb20baf27ee9ca56c5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c729696bcf8b23450043dd9c9972c15e53419ae4",
              "lessThan": "2a1780f9fc2493bd34c418a0be6fc58943afcecf",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/s390/block/dasd_eckd.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.3"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.3",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.109",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.50",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.4",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/s390/block/dasd_eckd.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-11T20:19:26.527",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/2a1780f9fc2493bd34c418a0be6fc58943afcecf",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/449f3bada7a9fad8b8cdf4bb20baf27ee9ca56c5",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/4a042d8e5f34282577ece50515cea8bb1246914d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/536407b272402af679155910d7fdeeb4834eefb9",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/57db27ccc162afe0726cffec0ae62e410ed2d0e9",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/644b666c202cce12ccfcf9ded67089b18f4f7659",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/6452c13646af7c13d7f6668b6690cfb2427e7f7b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/bd8b4572528f9604a13bf3c7c2a167f5cf222f72",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: Guard sysfs discipline callbacks against unallocated private data\n\nSeveral sysfs show/store handlers call a discipline callback that\ndereferences device->private, either directly or through the\nDASD_DEFINE_ATTR() macro. During dasd_generic_set_online() the discipline\nis assigned before check_device() allocates device->private, so an\nunprivileged read of one of these world-readable attributes in that window\ndereferences a NULL pointer and panics.\n\nGuard the dereference inside each callback that actually touches\ndevice->private."
    }
  ],
  "lastModified": "2026-09-14T13:19:02.093",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}