[ CVE-2026-98652 · Published 18 Oct 2026 ]

Vulnerability in Linux

Not scored yet EPSS <1%1 agency advisoryNo fix listed yet

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Add missing srcu in kvm_s390_set_irq_state() Like kvm_s390_inject_vcpu(), kvm_s390_set_irq_state() also needs the kvm->srcu or the slots lock when performing the Store status operation. Fix by taking kvm->srcu in kvm_s390_set_irq_state().

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

BSI CERT-Bund18 Oct 2026WID-SEC-2026-4019

Linux Kernel: Multiple vulnerabilities Translated from German
CVE-2026-98866CVE-2026-98624CVE-2026-98745+326 more CVEs

[ References ]References

git.kernel.org/stable/c/7a33007b95c8908ae3980eb2b4c508f8936766df
git.kernel.org/stable/c/f3a557067d57ce6ae98d485c8009b223e16f5f36

[ Description ]Official description

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

Linux Kernel: Multiple vulnerabilities Translated from German

[ References ]References