CVE-2026-89926

A flaw was found in the Linux kernel's KVM s390 component. A local user can exploit this vulnerability by providing a specially crafted length value to the hardware breakpoint kvmhwbreakpoint mechanism. This integer truncation can lead to an attempted allocation of over 4GB of memory, causing the...

Linux Distros Unpatched Vulnerability : CVE-2026-98651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: Properly handle NULL pointer in datcondsetstoragekey Some callers pass NULL as oldkey. Calling pagecondsetstoragekey will cause that NULL pointer to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.26 has a security vulnerability. This vulnerability stems from the KVM s390’s kvms390setirqstate function, which does not acquire the locks on kvm-srcu or slots when performing the Store status operation, potentially leading to race conditions...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains a security vulnerability. This vulnerability stems from the fact that the datcondsetstoragekey function in KVM s390 does not check the NULL oldkey passed by the caller. As a result, when the pagecondsetstoragekey function is called, a null pointer dereferenci...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains a security vulnerability. This vulnerability arises from the fact that the gaccessshadowfault function in KVM s390 does not handle the situation where nested client memory pages do not exist in the parent client’s gmap. Additionally, the datentrywalk function...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains security vulnerabilities. These vulnerabilities stem from race conditions in the datskey function of KVM s390. This allows for concurrent splitting of large pages, resulting in crashes when crste that does not point to a large page is used...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains a security vulnerability. This vulnerability stems from a race condition in the destroypagescrste function of KVM s390, which occurs when reading crste. This condition may lead to pointers being rereferenced multiple times...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Call srcu when importing watchpoint data. The function importwpinfo backs up the original guest memory contents of a watchpoint using readguestabs. This function is equivalent to kvmreadguest, and it resolves the issue...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fixed memory accounting for pinned/unpinned pages The accountmem and unaccountmem functions call getuid, which increments the reference count of struct userstruct on every invocation. However, we do not decrement...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: KVM: s390 – Fixed an issue where olddata leaks in the guest debug error path. importwpinfo allocates a buffer called olddata per watchpoint, to backup the original guest memory contents. If a subsequent watchpoint of the same...

kernel: KVM: s390: vsie: zero stale crypto bits

A flaw was found in the Linux kernel's KVM s390 Virtual Shared Inter-Partition Emulation VSIE component. When shadowing crypto access bits from a format0 apcb, stale crypto bits were not properly cleared. This oversight could allow a nested guest to potentially access a device that should no long...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Rejects adapter interrupt forwarding if it is already enabled. The MPCIFC instruction does not allow registering adapter interrupts without first unregistering them. Therefore, any request to enable interrupt...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390 – Fixed a memory leak in guest debug handling. The bpdata is only freed in the error case by using kfreebpdata. Every successful call to KVMSETGUESTDEBUG will cause the bpdata to be leaked...

AZL-101664 CVE-2026-89920 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest channel subsystem is emulated in the userspace VMM. There is no point in...

DEBIAN-CVE-2026-89921

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Zero initialize data structures for injectpfaulttoken kvminjectpfaulttoken only sets .type and .u.ext.extparams2 of the on-stack struct kvms390irq but the full ext substructure is copied into the cpu local variable on...

DEBIAN-CVE-2026-89920

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest channel subsystem is emulated in the userspace VMM. There is no point in...

DEBIAN-CVE-2026-89924

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix olddata leak in guest debug error path importwpinfo allocates a per-watchpoint olddata buffer to back up the original guest memory contents. If a later watchpoint of the same KVMSETGUESTDEBUG request fails to impor...

DEBIAN-CVE-2026-89922

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Take srcu when importing watchpoint data importwpinfo backs up the original guest memory contents of a watchpoint with readguestabs, which is kvmreadguest and therefore resolves the memslot via kvmmemslots. That requir...

AZL-101465 CVE-2026-89923 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Free guest debug data on vcpu destroy kvms390clearbpdata is only called from kvmarchvcpuioctlsetguestdebug, i.e. when user space changes or disables debugging. A vCPU that is destroyed while hardware breakpoints are...

DEBIAN-CVE-2026-89923

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Free guest debug data on vcpu destroy kvms390clearbpdata is only called from kvmarchvcpuioctlsetguestdebug, i.e. when user space changes or disables debugging. A vCPU that is destroyed while hardware breakpoints are...