CVE-2026-68141

A flaw was found in the af_iucv component of the Linux kernel. This vulnerability occurs when the afiucv_hs_callback_syn() function fails to allocate a child socket, leading to a NULL pointer being passed to iucv_sock_kill(). An attacker could potentially trigger this condition, causing a NULL pointer dereference and resulting in a system crash, leading to a Denial of Service (DoS).

This issue affects AF_IUCV sockets on s390. afiucv_hs_callback_syn() NULL-dereferences child socket when GFP_ATOMIC allocation fails. s390 IUCV users only.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.