CVE-2026-89924KVM: s390: Fix old_data leak in guest debug error path
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix old_data leak in guest debug error path __import_wp_info() allocates a per-watchpoint old_data buffer to back up the original guest memory contents. If a later watchpoint of the same KVM_SET_GUEST_DEBUG request fails to import, kvm_s390_import_bp_data() jumps to the error label, which frees the wp_info array but not the old_data buffers of the entries that were imported successfully. Up to MAX_BP_COUNT - 1 buffers of up to MAX_WP_SIZE bytes are leaked per failed request, and the request can be repeated. Create error handling for cleaning up all created old_data memory areas.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 27291e2165b6de70c476b7b675308113edd69a60 builds before 124c81ee610e1fbdd93d4399f88d9e28ba97a941; from 27291e2165b6de70c476b7b675308113edd69a60 before e5ae7816e5ad145618f7fd568a0e8a94dd9f81f4; from 27291e2165b6de70c476b7b675308113edd69a60 before c85d402553987777cc4742751437ea5dcbf98a7b; 27291e2165b6de70c476b7b675308113edd69a60 builds before 5fbf319137735252eefa507193c9a619af5b7457; 27291e2165b6de70c476b7b675308113edd69a60 builds before 4048d0a252163084794be3e37995b872c5178913; from 27291e2165b6de70c476b7b675308113edd69a60 before f55e4d415d95342d5753e528e05a1e8623992c3f; 27291e2165b6de70c476b7b675308113edd69a60 builds before 46cb8a273e2f853f89a78b59dbdff8787b6e1c86; from 27291e2165b6de70c476b7b675308113edd69a60 before aa9c8e8baf1e765fa65b93212522c636f25d846f | CNA record |
References
- https://git.kernel.org/stable/c/124c81ee610e1fbdd93d4399f88d9e28ba97a941
- https://git.kernel.org/stable/c/e5ae7816e5ad145618f7fd568a0e8a94dd9f81f4
- https://git.kernel.org/stable/c/c85d402553987777cc4742751437ea5dcbf98a7b
- https://git.kernel.org/stable/c/5fbf319137735252eefa507193c9a619af5b7457
- https://git.kernel.org/stable/c/4048d0a252163084794be3e37995b872c5178913
- https://git.kernel.org/stable/c/f55e4d415d95342d5753e528e05a1e8623992c3f
- https://git.kernel.org/stable/c/46cb8a273e2f853f89a78b59dbdff8787b6e1c86
- https://git.kernel.org/stable/c/aa9c8e8baf1e765fa65b93212522c636f25d846f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.