CVE-2026-74690 PUBLISHED

s390/ism: Fix UAF of sba and ieq during ism_dev_exit()

Assigner: Linux
Reserved: 15.08.2026 Published: 22.08.2026 Updated: 22.08.2026

In the Linux kernel, the following vulnerability has been resolved:

s390/ism: Fix UAF of sba and ieq during ism_dev_exit()

A ism interrupt handler can be active in parallel with ism_dev_exit(), accessing freed data structures.

No new interrupts will be generated after unregister_ieq(). Drain ongoing interrupt handlers by free_irq(), before freeing ism data structures.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 684b89bc39ce4f204b1a2b180f39f2eb36a6b695 to fc3021284050ecb3bba8a7851340cedcb5037928 (excl.)
  • affected from 684b89bc39ce4f204b1a2b180f39f2eb36a6b695 to 774394d27930ec4cf4cb3eed8ab6a4d20cb2430a (excl.)
  • affected from 684b89bc39ce4f204b1a2b180f39f2eb36a6b695 to b1896543ce59c4258625a35cf41e23a9a1f80ea2 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 4.19 is affected
  • unaffected from 0 to 4.19 (excl.)
  • unaffected from 6.18.45 to 6.18.* (incl.)
  • unaffected from 7.1.9 to 7.1.* (incl.)
  • unaffected from 7.2 to * (incl.)

References