KVM: s390: Fix memory corruption by not reinjecting CK machine checks
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest channel subsystem is emulated in the userspace VMM. There is no point in forwarding such machine checks into the guest. This also simplifies the machine check reinjection and avoids kfree of a stack variable as reported by sashiko. There might be still machine checks that have the ck bit set with another bit (like instruction damage), mask out the CK bit in s390_backup_mcck_info(), like the CP and ED bits already are.
CVE-2026-89920
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-89920
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4d62fcc0b692e3b4058d7d138114c27cd8b011f7",
"lessThan": "5c63e2ed840c85e27172ab78e7db3ac77fba281b",
"versionType": "git"
},
{
"status": "affected",
"version": "4d62fcc0b692e3b4058d7d138114c27cd8b011f7",
"lessThan": "b7631982fb65dd355acd18e62b384bc8125e9c44",
"versionType": "git"
},
{
"status": "affected",
"version": "4d62fcc0b692e3b4058d7d138114c27cd8b011f7",
"lessThan": "6ee52d3af2a1bf70349cf3f860933c8d221e229a",
"versionType": "git"
},
{
"status": "affected",
"version": "4d62fcc0b692e3b4058d7d138114c27cd8b011f7",
"lessThan": "7077ec953996acc04b49d1dfc43df1c1a2a74395",
"versionType": "git"
},
{
"status": "affected",
"version": "4d62fcc0b692e3b4058d7d138114c27cd8b011f7",
"lessThan": "546dde823a36d7283dcf46127c2f3d093443860f",
"versionType": "git"
}
],
"programFiles": [
"arch/s390/include/asm/nmi.h",
"arch/s390/kernel/nmi.c",
"arch/s390/kvm/interrupt.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4.13"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "4.13",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.6.160",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.114",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.51",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.5",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"arch/s390/include/asm/nmi.h",
"arch/s390/kernel/nmi.c",
"arch/s390/kvm/interrupt.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-89920
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #48566 · Revision 1
- Added to Heist Feed
- Publisher date