NULL pointer dereference in Linux kernel - CVE-2026-98358

Vulnerability details

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to a null pointer dereference in the iSER initiator's iser_check_remote_inv() and iser_inv_desc() functions when processing remote invalidations for unregistered data directions. A remote attacker can respond to a write command with IB_WR_SEND_WITH_INV to cause a denial of service.

The triggering write command sends all of its data as immediate data. Exploitation requires control of the target responding to the initiator.

Affected software

How to mitigate CVE-2026-98358

External References

• https://git.kernel.org/stable/c/198e4db9add54a50cce60a5d80b8f0ee5456b65a
• https://git.kernel.org/stable/c/19ddd4af7fce9200e70882f622011e9dd130f427
• https://git.kernel.org/stable/c/6ed3ebaff3345837f0528d85bd39ce573c7b9a41
• https://git.kernel.org/stable/c/9d145a2d8d6f8f2cc460b80df41870819048f2a0
• https://git.kernel.org/stable/c/b4d278c91209931199db9c0836dc2e21a7593dad
• https://git.kernel.org/stable/c/b9e37452915feaa8422af87dea5d0c16a7d1ff13
• https://git.kernel.org/stable/c/ceecf3f9c322fc6937a66682942a26ad13a34a07
• https://git.kernel.org/stable/c/d85f0f0a7c85756fc992c70d869706f19dac9259

Related Security Bulletins

• NULL pointer dereference in Linux kernel ulp iser driver
• Debian update for linux