Live › vulnerability › CVE-2026-98649
Go to dashboardThe Linux kernel's KVM s390 code could read a page table entry through a pointer several times during teardown, which allowed a race. The sources do not state what an attacker gains from the race.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Only hosts running KVM virtualization on IBM Z (s390x) are relevant, since the flaw is in the s390 KVM code. Systems on x86, ARM or other architectures are not affected. The sources do not describe the exact trigger or required privileges.
No product ranges from the sources yet.
uname -r and compare it against the fixed release in the kernel stable tree.lsmod | grep kvm.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: Fix race in _destroy_pages_crste()
Use READ_ONCE() in _destroy_pages_crste() to read the crste, avoid dereferencing the pointer multiple times.
This page as .md · .json · in your agent: get_signal("CVE-2026-98649")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.