CVE-2026-89925 PUBLISHED

KVM: s390: Fix memory leak in guest debug handling

Assigner: Linux
Reserved: 11.09.2026 Published: 16.09.2026 Updated: 16.09.2026

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: Fix memory leak in guest debug handling

bp_data is freed only for the error case by kfree(bp_data). Every successful KVM_SET_GUEST_DEBUG will leak bp_data.

Vendor	Linux
Product	Linux
Versions	Default: unaffected affected from 27291e2165b6de70c476b7b675308113edd69a60 to 39e7cebb889839b5762c9ad22e2d715b5883b288 (excl.) affected from 27291e2165b6de70c476b7b675308113edd69a60 to 58b1b729a9f90c80b508fc3e2174cbc0ee50859e (excl.) affected from 27291e2165b6de70c476b7b675308113edd69a60 to 9071f75cbde3bf46119cb28e92cfbef830c4bf97 (excl.) affected from 27291e2165b6de70c476b7b675308113edd69a60 to 5940418e4232a2ff1d30ba12e0d213dbf48f0a83 (excl.) affected from 27291e2165b6de70c476b7b675308113edd69a60 to fc2034c431adcbaabf5f8a01912358f07355349e (excl.) affected from 27291e2165b6de70c476b7b675308113edd69a60 to 44bf3792c10f4bb3de507391f1837e020d92eaa2 (excl.) affected from 27291e2165b6de70c476b7b675308113edd69a60 to 581be9f6085834188cef1ad2f07babf3b421e409 (excl.) affected from 27291e2165b6de70c476b7b675308113edd69a60 to 121ea1de927c8b9bfdf53c31cad27b86d5de0293 (excl.)

Vendor	Linux
Product	Linux
Versions	Default: affected Version 3.16 is affected unaffected from 0 to 3.16 (excl.) unaffected from 5.10.270 to 5.10.* (incl.) unaffected from 5.15.221 to 5.15.* (incl.) unaffected from 6.1.188 to 6.1.* (incl.) unaffected from 6.6.157 to 6.6.* (incl.) unaffected from 6.12.110 to 6.12.* (incl.) unaffected from 6.18.51 to 6.18.* (incl.) unaffected from 7.2.5 to 7.2.* (incl.) unaffected from 7.3-rc1 to * (incl.)