Null-Pointer Dereference in the Linux Kernel Affecting Multiple Distributions

CVE-2026-97506

What is CVE-2026-97506?

A vulnerability in the Linux kernel's handling of buffer descriptors could lead to a null-pointer dereference if the allocation of memory fails during the construction of a linked list for a scatterlist. The flaw occurs in the chainup_buffers() function, which fails to properly handle allocation failures, leaving the system susceptible to potential crashes. The vulnerability allows for improper resource management of partially constructed chains, which could result in unexpected behavior or system stability issues. A fix has been implemented to ensure proper termination of the buffer chain on allocation failure, allowing for safe unwinding via existing cleanup paths.

References