CVE-2026-99125

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttles the sampling using: perfeventthrottle -- PMU-stop Shortly later the...

CVE-2026-99126

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Prevent XID null dereference The mpcvalidatexid function sets grp-savedxid2-xid2flag2 to 0x40 to signal XID validation error. If peer XID is NULL or r/w channel pairing mismatch happens, grp-savedxid2 is never...

CVE-2026-99124

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix leak of uninitialized kernel data in SCLP report While reporterrorwrite checks that the provided buffer is at least as large as the header struct, but not that it is large enough to contain the report with the lengt...

CVE-2026-99125

The Linux kernel contains a vulnerability related to how the s390/pai component handles multiple PMU stop callback invocations. Specifically, a high sampling load can trigger perf_event_throttle(), which calls PMU->stop(). If the scheduler subsequently terminates the task and removes it from t...

CVE-2026-99126

The Linux kernel contains a vulnerability in the s390/ctcm component where the mpc_validate_xid() function causes a NULL dereference . This occurs because the function attempts to set the xid2_flag2 flag on grp->saved_xid2; however, if a peer XID is NULL or a read/write channel pairing mismatc...

CVE-2026-99125 s390/pai: Handle multiple PMU stop callback invocations

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttles the sampling using: perfeventthrottle -- PMU-stop Shortly later the...

CVE-2026-99126 s390/ctcm: Prevent XID null dereference

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Prevent XID null dereference The mpcvalidatexid function sets grp-savedxid2-xid2flag2 to 0x40 to signal XID validation error. If peer XID is NULL or r/w channel pairing mismatch happens, grp-savedxid2 is never...

EUVD-2026-111877

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttles the sampling using: perfeventthrottle -- PMU-stop Shortly later the...

EUVD-2026-111878

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Prevent XID null dereference The mpcvalidatexid function sets grp-savedxid2-xid2flag2 to 0x40 to signal XID validation error. If peer XID is NULL or r/w channel pairing mismatch happens, grp-savedxid2 is never...

CVE-2026-99124

The Linux kernel contains a vulnerability in the s390/pci component where uninitialized kernel data can be leaked via SCLP reports . The root cause is in report_error_write(), which fails to verify if the provided buffer is large enough to accommodate the length claimed by report->length. If u...

CVE-2026-99124 s390/pci: Fix leak of uninitialized kernel data in SCLP report

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix leak of uninitialized kernel data in SCLP report While reporterrorwrite checks that the provided buffer is at least as large as the header struct, but not that it is large enough to contain the report with the lengt...

EUVD-2026-111876

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix leak of uninitialized kernel data in SCLP report While reporterrorwrite checks that the provided buffer is at least as large as the header struct, but not that it is large enough to contain the report with the lengt...

PT-2026-128117

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix leak of uninitialized kernel data in SCLP report While report error write checks that the provided buffer is at least as large as the header struct, but not that it is large enough to contain the report with the...

PT-2026-128118

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttles the sampling using: perf event throttle -- PMU-stop Shortly later t...

PT-2026-128119

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Prevent XID null dereference The mpc validate xid function sets grp-saved xid2-xid2 flag2 to 0x40 to signal XID validation error. If peer XID is NULL or r/w channel pairing mismatch happens, grp-saved xid2 is never...

RLSA-2026:89814 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled CVE-2026-74515 For more details about the security issues,...

kernel-rt security update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

RLSA-2026:89816 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled CVE-2026-74515 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RockyLinux 8 : kernel (RLSA-2026:89816)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:89816 advisory. kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled CVE-2026-74515 Tenable has extracted the preceding description block directly from...