CVE-2026-98593
En el kernel de Linux se ha resuelto la siguiente vulnerabilidad:
s390/debug: Corregir la desreferenciación de puntero NULL en debug_info_copy()
Cuando debug_register_static() falla, borra areas, active_pages y active_entries, pero deja sin cambios los límites de las áreas. Al copiar un área de este tipo, ya sea abriendo su archivo de vista o mediante debug_dump(), debug_info_copy() desreferencia los punteros NULL.
Omitir el bucle de copia cuando el origen no tiene áreas.
Traducción automática del texto original de NVD (en inglés).
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días
- 0.17 %
- Percentil entre todas las CVEs puntuadas
- 6
- Fecha de la puntuación
- 20/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
Mostrar las 7 referencias
- https://git.kernel.org/stable/c/012bfcd5a51082d5a65f096dfb9ca652b5267965
- https://git.kernel.org/stable/c/13decd3b3b3a4d8a2e603fb8c9ffde0c6be3c225
- https://git.kernel.org/stable/c/2de9c458cc49d8db6408a7c5fbf0c7c94fe4d52b
- https://git.kernel.org/stable/c/33f706884821da9cb55b650b7b1d4f2bdf800137
- https://git.kernel.org/stable/c/9c6af88fbefbe77608b77409df23a1617e28398c
- https://git.kernel.org/stable/c/a19bede30f0da5ae56782edac62b5998a7434cba
- https://git.kernel.org/stable/c/c593f38e1cdb92f87d01be4c4e5ac12417b1454b
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-98593",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "d72541f945127b4873dace501406a1bc8cd8e1e9",
"lessThan": "13decd3b3b3a4d8a2e603fb8c9ffde0c6be3c225",
"versionType": "git"
},
{
"status": "affected",
"version": "d72541f945127b4873dace501406a1bc8cd8e1e9",
"lessThan": "a19bede30f0da5ae56782edac62b5998a7434cba",
"versionType": "git"
},
{
"status": "affected",
"version": "d72541f945127b4873dace501406a1bc8cd8e1e9",
"lessThan": "33f706884821da9cb55b650b7b1d4f2bdf800137",
"versionType": "git"
},
{
"status": "affected",
"version": "d72541f945127b4873dace501406a1bc8cd8e1e9",
"lessThan": "2de9c458cc49d8db6408a7c5fbf0c7c94fe4d52b",
"versionType": "git"
},
{
"status": "affected",
"version": "d72541f945127b4873dace501406a1bc8cd8e1e9",
"lessThan": "9c6af88fbefbe77608b77409df23a1617e28398c",
"versionType": "git"
},
{
"status": "affected",
"version": "d72541f945127b4873dace501406a1bc8cd8e1e9",
"lessThan": "c593f38e1cdb92f87d01be4c4e5ac12417b1454b",
"versionType": "git"
},
{
"status": "affected",
"version": "d72541f945127b4873dace501406a1bc8cd8e1e9",
"lessThan": "012bfcd5a51082d5a65f096dfb9ca652b5267965",
"versionType": "git"
}
],
"programFiles": [
"arch/s390/kernel/debug.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.15"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.15",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.15.222",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.189",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.158",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.112",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.55",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.9",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"arch/s390/kernel/debug.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-10-18T16:17:11.933",
"references": [
{
"url": "https://git.kernel.org/stable/c/012bfcd5a51082d5a65f096dfb9ca652b5267965",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/13decd3b3b3a4d8a2e603fb8c9ffde0c6be3c225",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/2de9c458cc49d8db6408a7c5fbf0c7c94fe4d52b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/33f706884821da9cb55b650b7b1d4f2bdf800137",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/9c6af88fbefbe77608b77409df23a1617e28398c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a19bede30f0da5ae56782edac62b5998a7434cba",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/c593f38e1cdb92f87d01be4c4e5ac12417b1454b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/debug: Fix NULL pointer dereference in debug_info_copy()\n\nWhen debug_register_static() fails, it clears areas, active_pages and\nactive_entries but leaves the area bounds unchanged. Copying such an\narea, either by opening its view file or via debug_dump(), makes\ndebug_info_copy() dereference the NULL pointers.\n\nSkip the copy loop when the source has no areas."
}
],
"lastModified": "2026-10-19T10:19:20.473",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}