601947 matches found
CVE-2026-98655 perf: Require kernel access for text poke events
In the Linux kernel, the following vulnerability has been resolved: perf: Require kernel access for text poke events Perf events with excludekernel=1 can be opened without kernel perf access. However, excludekernel does not suppress text-poke sideband records. Every PERFRECORDTEXTPOKE is marked...
EUVD-2026-103568
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atomize IRQ register read/modify/write ops Why The OTGGLOBALSYNCSTATUS register controls various HW IRQ sources for the output timing generator OTG. VUPDATENOLOCK is one of them. To enable the IRQ, driver sets th...
CVE-2026-98654
The Linux kernel contains a race condition within the drm/amd/display driver. The issue arises because read/modify/write (RMW) operations on the OTG_GLOBAL_SYNC_STATUS register (and other IRQ control registers) are not atomic. Specifically, a race can occur between a thread disabling an IRQ and t...
EUVD-2026-103567
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix gaccessshadowfault In some circumstances, it is possible that the page of nested guest memory that is being shadowed is not present at all in the parent guest gmap. datentrywalk will not find any leaf entry and...
CVE-2026-98653 KVM: s390: Fix _gaccess_shadow_fault()
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix gaccessshadowfault In some circumstances, it is possible that the page of nested guest memory that is being shadowed is not present at all in the parent guest gmap. datentrywalk will not find any leaf entry and...
CVE-2026-98653
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix gaccessshadowfault In some circumstances, it is possible that the page of nested guest memory that is being shadowed is not present at all in the parent guest gmap. datentrywalk will not find any leaf entry and...
CVE-2026-98652 KVM: s390: Add missing srcu in kvm_s390_set_irq_state()
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Add missing srcu in kvms390setirqstate Like kvms390injectvcpu, kvms390setirqstate also needs the kvm-srcu or the slots lock when performing the Store status operation. Fix by taking kvm-srcu in kvms390setirqstate...
CVE-2026-98652
The Linux kernel contains a vulnerability in the KVM subsystem specifically affecting the s390 architecture. The issue is caused by a missing srcu (or slots lock) in the kvm_s390_set_irq_state() function during the Store status operation, similar to the requirement in kvm_s390_inject_vcpu(). The ...
EUVD-2026-103566
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Add missing srcu in kvms390setirqstate Like kvms390injectvcpu, kvms390setirqstate also needs the kvm-srcu or the slots lock when performing the Store status operation. Fix by taking kvm-srcu in kvms390setirqstate...
CVE-2026-98652 KVM: s390: Add missing srcu in kvm_s390_set_irq_state()
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Add missing srcu in kvms390setirqstate Like kvms390injectvcpu, kvms390setirqstate also needs the kvm-srcu or the slots lock when performing the Store status operation. Fix by taking kvm-srcu in kvms390setirqstate...
EUVD-2026-103565
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Properly handle NULL pointer in datcondsetstoragekey Some callers pass NULL as oldkey. Calling pagecondsetstoragekey will cause that NULL pointer to get dereferenced. Fix by checking for NULL and assigning the pointer ...
EUVD-2026-103564
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix potential races in dat skey functions When datcondsetstoragekey finds a large page, it will conditionally set the storage key in absolute memory using largecrstetophys to get the absolute address. There is a race...
CVE-2026-98649 KVM: s390: Fix race in _destroy_pages_crste()
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix race in destroypagescrste Use READONCE in destroypagescrste to read the crste, avoid dereferencing the pointer multiple times...
EUVD-2026-103563
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix race in destroypagescrste Use READONCE in destroypagescrste to read the crste, avoid dereferencing the pointer multiple times...
CVE-2026-98649
The Linux kernel contains a race condition within the KVM s390 module in the _destroy_pages_crste() function. The underlying cause is the multiple dereferencing of a pointer, which can be mitigated by using READ_ONCE() to read the crste. No specific version numbers, impact details, or exploit inf...
CVE-2026-98649 KVM: s390: Fix race in _destroy_pages_crste()
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix race in destroypagescrste Use READONCE in destroypagescrste to read the crste, avoid dereferencing the pointer multiple times...
CVE-2026-98648 s390/uv: Prevent potential out-of-bounds read
In the Linux kernel, the following vulnerability has been resolved: s390/uv: Prevent potential out-of-bounds read When the system has more than 85 secrets, the uvsecretlist struct array only holds up to 85 items per page, resulting in an out of bounds read in findsecretinpage if the targeted secr...
EUVD-2026-103562
In the Linux kernel, the following vulnerability has been resolved: s390/uv: Prevent potential out-of-bounds read When the system has more than 85 secrets, the uvsecretlist struct array only holds up to 85 items per page, resulting in an out of bounds read in findsecretinpage if the targeted secr...
CVE-2026-98648 s390/uv: Prevent potential out-of-bounds read
In the Linux kernel, the following vulnerability has been resolved: s390/uv: Prevent potential out-of-bounds read When the system has more than 85 secrets, the uvsecretlist struct array only holds up to 85 items per page, resulting in an out of bounds read in findsecretinpage if the targeted secr...