SB2026100711 - NULL pointer dereference in Linux kernel ulp iser driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026100711

SB2026100711 - NULL pointer dereference in Linux kernel ulp iser driver

Published: October 7, 2026

Security Bulletin ID SB2026100711
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) NULL pointer dereference (CVE-ID: CVE-2026-98358)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to a null pointer dereference in the iSER initiator's iser_check_remote_inv() and iser_inv_desc() functions when processing remote invalidations for unregistered data directions. A remote attacker can respond to a write command with IB_WR_SEND_WITH_INV to cause a denial of service.

The triggering write command sends all of its data as immediate data. Exploitation requires control of the target responding to the initiator.


Remediation

Install update from vendor's website.

References