CVE-2026-98652
Linux: KVM: s390: Add missing srcu in kvm_s390_set_irq_state()
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 7a33007b95c8908ae3980eb2b4c508f8936766dfLinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: Add missing srcu in kvm_s390_set_irq_state()
Like kvm_s390_inject_vcpu(), kvm_s390_set_irq_state() also needs the kvm->srcu or the slots lock when performing the Store status operation.
Fix by taking kvm->srcu in kvm_s390_set_irq_state().
Text from CVE List
Affected versions 6
- Linuxaffected: ba5c1e9b6ceebdc39343cc03eb39f077abd3c571 before 7a33007b95c8908ae3980eb2b4c508f8936766dfCVE List
- Linuxaffected: ba5c1e9b6ceebdc39343cc03eb39f077abd3c571 before f3a557067d57ce6ae98d485c8009b223e16f5f36CVE List
- Linuxaffected: 2.6.26CVE List
- Linuxunaffected: all versions before 2.6.26CVE List
- Linuxunaffected: 7.2.9 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List