CVE-2026-80684

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails, zdev-aibv will be NULL and fail when dereferenced in kvmzpcisetairq...

EUVD-2026-66466

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full...

CVE-2026-80554

CVE-2026-80554 affects the Linux kernel's s390/vfio_ccw subsystem. The root cause is the recursive processing of channel programs: the vfio-ccw logic splits channel programs into segments at each Transfer-In-Channel (TIC) CCW , and the combined segment count contributes to a global limit on CCWs ...

CVE-2026-80551 s390/vfio_ccw: Ensure first IDAW remains constant

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full...

CVE-2026-80547

This vulnerability affects the Linux kernel 's s390/vfio_ccw subsystem (Virtual Function Interface for Channel-Word devices on the s390 architecture). The root cause is a missing lock on the CRW (Control Region Word) region, which handles asynchronous hardware events; without it, the list of payl...

Linux Distros Unpatched Vulnerability : CVE-2026-80547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfioccw: Implement a crw lock Unlike the channelprogram struct, which covers synchronous I/O submissions and asynchronous interrupts, the CRW region relies...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fixed the issue ofracy access to the physical CPU number in the diag 9c handler. We currently check if the target CPU equals -1, but this may change at a later time when we will use this functionality. We store th...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: s390/dcssblk: fixed the kernel crash caused by corruption in the listadd operation. The commit fb08a1908cb1 “dax: simplified the daxdevice gendisk association” introduced new logic for gendisk association, requiring drivers to...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fixed the check for NULL values in the SCCB field. The tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed after the...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Fixed a potential memory leak related to jitdata. Make sure that jitdata is freed through kfree in the error path...

Linux Distros Unpatched Vulnerability : CVE-2026-72412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and...

Linux Distros Unpatched Vulnerability : CVE-2026-72011

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/diag: Add missing arrayindexnospec call to memtopgetpagecount 'level' is user space controlled and used to read from an array. Add the missing...

CVE-2026-72292

A flaw was found in the kernel. A local user could exploit a vulnerability in the KVMS390GETCMMABITS ioctl, specifically within the kvms390getcmmabits function. This function allocates memory without properly initializing all pages, leading to uninitialized memory regions. These uninitialized...

UBUNTU-CVE-2026-72412

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved /...

CVE-2026-72412

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved /...

CVE-2026-72412 s390/mm: Fix handling of _PAGE_UNUSED pte bit

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of PAGEUNUSED pte bit The PAGEUNUSED softbit should not really be lying around. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved /...

EUVD-2026-58983

In the Linux kernel, the following vulnerability has been resolved: s390/monwriter: Reject buffer reuse with different data length When data buffers are reused, e.g. for interval sample records, the first record determines the data length, and the size of the buffer for user copy. Current monwrit...

CVE-2026-72011 s390/diag: Add missing array_index_nospec() call to memtop_get_page_count()

In the Linux kernel, the following vulnerability has been resolved: s390/diag: Add missing arrayindexnospec call to memtopgetpagecount 'level' is user space controlled and used to read from an array. Add the missing arrayindexnospec call to prevent speculative execution...

CVE-2026-68385

A flaw was found in the Linux kernel's s390 architecture checksumming mechanism. On systems without a vector facility, the csumpartial function incorrectly calculates checksums. This occurs because the csumcopy function, when called with specific parameters, falls back to calculating the checksum...

Linux Distros Unpatched Vulnerability : CVE-2026-68385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/checksum: Fix csumpartial without vector facility Currently csumpartial calls csumcopy with copy=false and dst=NULL. On machines without the vector facilit...