CVE-2026-89955

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the s390/vfio-ap component during queue probe. When the vfio ap mdev probe queue() function creates the sysfs attribute group, the driver data for the queue is not yet established. A concurrent read of the 'status' attribute triggers dev get drvdata(), which returns NULL. This value is passed to vfio ap mdev for queue(), where the q->apqn variable is dereferenced without validation, leading to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.