{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2026-98387 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2026-98387 is a vulnerability in Linux, published on 14 Oct 2026."},"fix_prompt":"Check this codebase for CVE-2026-98387 and fix it if it is affected.\n\nWhat it is: CVE-2026-98387 is a vulnerability in Linux, published on 14 Oct 2026. \nExploitation: There is no known exploitation of CVE-2026-98387 in the wild and no public exploit code.\n\nAffected product: Linux. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-98387/ (Markdown: https://insights.sbomify.com/CVE-2026-98387/index.md)","id":"CVE-2026-98387","markdown":"https://insights.sbomify.com/CVE-2026-98387/index.md","name":"CVE-2026-98387","record":{"aliases":["AZL-108137","BELL-CVE-2026-98387","DEBIAN-CVE-2026-98387","GHSA-qwcv-vwq2-whqp","UBUNTU-CVE-2026-98387"],"analysis":{"component_type":"kernel","fix_type":"patch","impacts":["denial_of_service","other"],"network_reachable":"unknown","non_default_config":false,"product_category":"Linux kernel","requires_auth":"none","summary":"Improper return code handling in the s390 crypto module can lead to undefined behavior or memory access issues, potentially causing system instability.","user_interaction":"not_required","vuln_class":"null_dereference"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Linux","cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: Fix skcipher_walk return code handling in aes_s390\n\nThe return codes from skcipher_walk_virt() were not properly checked\nbefore entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt().\nIf skcipher_walk_virt() fails, the walk structure may be in an undefined\nstate, and attempting to process data could lead to incorrect behavior\nor accessing uninitialized memory.\n\nAdd proper return code checking to ensure correct handling of the walk\ninitialization and walk advance and eventually return to the caller\nwith that return code.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"s390/crypto: Fix skcipher_walk return code handling in aes_s390","id":"CVE-2026-98387","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"null_dereference","year":"2026"},"n_packages":0,"n_references":4,"next":{"headline":"exec: do_close_on_exec() before taking exec_update_lock","id":"CVE-2026-98388"},"packages":[],"prev":{"headline":"scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot","id":"CVE-2026-98386"},"products":["Linux"],"published":"2026-10-14","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2026-10-19","vendors":["Linux"]},"summary":"Improper return code handling in the s390 crypto module can lead to undefined behavior or memory access issues, potentially causing system instability.","url":"https://insights.sbomify.com/CVE-2026-98387/"}