CVE-2026-98476

The Linux kernel contains a NULL pointer dereference vulnerability in the s390/cio component within the ccw_device_get_util_str() function. This occurs because a channel path registry entry associated with a CHPID may be removed while a subchannel's PMCW still references that CHPID, causing chpid...

CVE-2026-98476 s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()

In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fix NULL pointer dereference in ccwdevicegetutilstr The channel path registry entry associated with a CHPID may be removed while the subchannel's PMCW still references that CHPID. In this case, chpidtochp can return NUL...

EUVD-2026-103716

In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fix NULL pointer dereference in ccwdevicegetutilstr The channel path registry entry associated with a CHPID may be removed while the subchannel's PMCW still references that CHPID. In this case, chpidtochp can return NUL...

CVE-2026-98475 s390/cmf: Fix virtual vs physical address confusion

In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address is an absolute address. Define the associated schibconfig and schib fields as dma64t to enable automatic detection of incorrect assignments. Also a...

CVE-2026-98475

The Linux kernel is affected by a vulnerability in the s390/cmf component caused by virtual vs physical address confusion . The issue stems from the measurement block address being an absolute address, where the associated schib_config and schib fields were not correctly defined as dma64_t , and ...

CVE-2026-98475 s390/cmf: Fix virtual vs physical address confusion

In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address is an absolute address. Define the associated schibconfig and schib fields as dma64t to enable automatic detection of incorrect assignments. Also a...

EUVD-2026-103715

In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address is an absolute address. Define the associated schibconfig and schib fields as dma64t to enable automatic detection of incorrect assignments. Also a...

CVE-2026-98474 s390/pci: Fix missing device lock in zpci_report_status()

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpcireportstatus When pdev is non-NULL, zpcireportstatus accesses the device's driver. To get a consistent state matching the recovery, the device lock needs to be held. Do so by expanding the...

CVE-2026-98474

The Linux kernel contains a vulnerability in the s390/pci subsystem where the zpci_report_status() function fails to hold the necessary device lock when accessing a device's driver (specifically when pdev is non-NULL). This missing lock can lead to inconsistent states during recovery. The fix inv...

EUVD-2026-103714

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpcireportstatus When pdev is non-NULL, zpcireportstatus accesses the device's driver. To get a consistent state matching the recovery, the device lock needs to be held. Do so by expanding the...

CVE-2026-98474 s390/pci: Fix missing device lock in zpci_report_status()

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpcireportstatus When pdev is non-NULL, zpcireportstatus accesses the device's driver. To get a consistent state matching the recovery, the device lock needs to be held. Do so by expanding the...

CVE-2026-98473 s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Three related problems exist in the handling of KVM interrupt and page resources when a queue is removed from the host's AP configuration while assigned...

CVE-2026-98473

The Linux kernel contains a vulnerability in the s390/vfio-ap driver where KVM GISC registrations and pinned guest pages are leaked when a queue is removed from the host's AP configuration while assigned to a mediated device (mdev) . This occurs because the driver fails to handle the AP_RESPONSE_...

EUVD-2026-103713

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Three related problems exist in the handling of KVM interrupt and page resources when a queue is removed from the host's AP configuration while assigned...

CVE-2026-98473 s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Three related problems exist in the handling of KVM interrupt and page resources when a queue is removed from the host's AP configuration while assigned...

EUVD-2026-103712

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Free haveruncpus during VM destruction even if VM is no longer SEV Unconditionally free SEV's "have run CPUs" cpumask in the VM destroy path, i.e. even for what appear to be non-SEV VMs, as an SEV VM becomes a non-SEV V...

CVE-2026-98471 KVM: SEV: Do cache maintenance on the source VM during intra-host migration

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance on the source VM during intra-host migration Manually perform cache maintenance on the source VM during intra-host migration to ensure no stale data is left in CPU caches after the VM is destroyed...

CVE-2026-98471 KVM: SEV: Do cache maintenance on the source VM during intra-host migration

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance on the source VM during intra-host migration Manually perform cache maintenance on the source VM during intra-host migration to ensure no stale data is left in CPU caches after the VM is destroyed...

EUVD-2026-103711

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance on the source VM during intra-host migration Manually perform cache maintenance on the source VM during intra-host migration to ensure no stale data is left in CPU caches after the VM is destroyed...

CVE-2026-98471

The Linux kernel contains a vulnerability within the KVM module related to SEV (Secure Encrypted Virtualization). During an intra-host migration , the source VM is converted to a non-SEV VM, which prevents KVM's standard memory reclaim flows from triggering necessary cache maintenance. This can l...