CVE-2026-98653
Linux: KVM: s390: Fix _gaccess_shadow_fault()
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 94c43c7df46433ed4d1e18f13770b019ba977bd8LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: Fix _gaccess_shadow_fault()
In some circumstances, it is possible that the page of nested guest memory that is being shadowed is not present at all in the parent guest gmap. dat_entry_walk() will not find any leaf entry and return with -ENOENT, which will erroneously be propagated all the way to userspace.
Fix by manually calling gmap_link() on the memory of the nested guest that is being shadowed if the mapping was not already present.
Text from CVE List
Affected versions 6
- Linuxaffected: e38c884df92119d96f652d51f82661dd2fc0b885 before 94c43c7df46433ed4d1e18f13770b019ba977bd8CVE List
- Linuxaffected: e38c884df92119d96f652d51f82661dd2fc0b885 before faff4c8ff3dbec6d71b89dd281a0d17c4478fa44CVE List
- Linuxaffected: 7.0CVE List
- Linuxunaffected: all versions before 7.0CVE List
- Linuxunaffected: 7.2.9 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List