CVE-2026-89921KVM: s390: Zero initialize data structures for inject_pfault_token
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Zero initialize data structures for inject_pfault_token __kvm_inject_pfault_token() only sets .type and .u.ext.ext_params2 of the on-stack struct kvm_s390_irq but the full ext substructure is copied into the cpu local variable on inject. ext_params and pad contain stale stack values. Interrupt delivery only uses ext_params2, so nothing leaks to the guest, but a host user can use the migration ioctls to get to the data. Fix by zero-initializing the irq struct. Do the same for the inti data structure.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 383d0b050106abecb82f43101cac94fa423af5cd before b8abc760fa18a389319d977834a30550b3ec18e8; 383d0b050106abecb82f43101cac94fa423af5cd builds before 9b046de62b8098af6e2ba820b125ec9dc5f162c8; 383d0b050106abecb82f43101cac94fa423af5cd builds before 134f235e0e8de54611a72d3cc3f63e5f31246baa; 383d0b050106abecb82f43101cac94fa423af5cd builds before 4e2c7f7cbc27418f9a290399b986c1b85ff93b90 | CNA record |
References
- https://git.kernel.org/stable/c/b8abc760fa18a389319d977834a30550b3ec18e8
- https://git.kernel.org/stable/c/9b046de62b8098af6e2ba820b125ec9dc5f162c8
- https://git.kernel.org/stable/c/134f235e0e8de54611a72d3cc3f63e5f31246baa
- https://git.kernel.org/stable/c/4e2c7f7cbc27418f9a290399b986c1b85ff93b90
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.