CVE-2026-98475 PUBLISHED

s390/cmf: Fix virtual vs physical address confusion

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

s390/cmf: Fix virtual vs physical address confusion

The measurement block address is an absolute address. Define the associated schib_config and schib fields as dma64_t to enable automatic detection of incorrect assignments. Also add the missing virt_to_dma64() translation.

Without this fix, a wrong address will be used by firmware when storing extended format channel measurement data on kernels built with CONFIG_RANDOMIZE_IDENTITY_BASE=y.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 14edd0d73bfef320fd5be11495687ba537aa6341 to b11f369be31ea11c746833e4d3ad51dcd6b5fa2b (excl.)
  • affected from 14edd0d73bfef320fd5be11495687ba537aa6341 to 748ec2f7f5df9b4fc742546a8bfc8aa5d847353e (excl.)
  • affected from 14edd0d73bfef320fd5be11495687ba537aa6341 to 7f78226eb743b362f52b212d7763801642539d1c (excl.)
  • affected from 14edd0d73bfef320fd5be11495687ba537aa6341 to f4d04425e66af2ecee9d1a49ae0484436f3c2fd1 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.9 is affected
  • unaffected from 0 to 6.9 (excl.)
  • unaffected from 6.12.112 to 6.12.* (incl.)
  • unaffected from 6.18.55 to 6.18.* (incl.)
  • unaffected from 7.2.9 to 7.2.* (incl.)
  • unaffected from 7.3-rc5 to * (incl.)

References