CVE-2026-98652 PUBLISHED

KVM: s390: Add missing srcu in kvm_s390_set_irq_state()

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: Add missing srcu in kvm_s390_set_irq_state()

Like kvm_s390_inject_vcpu(), kvm_s390_set_irq_state() also needs the kvm->srcu or the slots lock when performing the Store status operation.

Fix by taking kvm->srcu in kvm_s390_set_irq_state().

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from ba5c1e9b6ceebdc39343cc03eb39f077abd3c571 to 7a33007b95c8908ae3980eb2b4c508f8936766df (excl.)
  • affected from ba5c1e9b6ceebdc39343cc03eb39f077abd3c571 to f3a557067d57ce6ae98d485c8009b223e16f5f36 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 2.6.26 is affected
  • unaffected from 0 to 2.6.26 (excl.)
  • unaffected from 7.2.9 to 7.2.* (incl.)
  • unaffected from 7.3-rc5 to * (incl.)

References