CVE-2026-98649
Linux: KVM: s390: Fix race in _destroy_pages_crste()
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.19%Chance of exploitation activity in the next 30 days, higher than 8% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in90bd832b2bc367991d424d847003ce345b454ffcAlso 4ca00a9154f998116fba9a32cce5bd938d228065CVE List
What fixes it
- 90bd832b2bc367991d424d847003ce345b454ffcLinuxCVE List
- 4ca00a9154f998116fba9a32cce5bd938d228065LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: Fix race in _destroy_pages_crste()
Use READ_ONCE() in _destroy_pages_crste() to read the crste, avoid dereferencing the pointer multiple times.
Text from CVE List
Affected versions 6
- Linuxaffected: a2c17f9270cc3f1c55c35e8b1d151f41d75b40f5 before 90bd832b2bc367991d424d847003ce345b454ffcCVE List
- Linuxaffected: a2c17f9270cc3f1c55c35e8b1d151f41d75b40f5 before 4ca00a9154f998116fba9a32cce5bd938d228065CVE List
- Linuxaffected: 7.0CVE List
- Linuxunaffected: all versions before 7.0CVE List
- Linuxunaffected: 7.2.9 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List