Back to CVE records
Not yet scoredPublished Sep 16, 2026
CVE-2026-89925KVM: s390: Fix memory leak in guest debug handling
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory leak in guest debug handling bp_data is freed only for the error case by kfree(bp_data). Every successful KVM_SET_GUEST_DEBUG will leak bp_data.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 27291e2165b6de70c476b7b675308113edd69a60 builds before 39e7cebb889839b5762c9ad22e2d715b5883b288; 27291e2165b6de70c476b7b675308113edd69a60 builds before 58b1b729a9f90c80b508fc3e2174cbc0ee50859e; 27291e2165b6de70c476b7b675308113edd69a60 builds before 9071f75cbde3bf46119cb28e92cfbef830c4bf97; from 27291e2165b6de70c476b7b675308113edd69a60 before 5940418e4232a2ff1d30ba12e0d213dbf48f0a83; from 27291e2165b6de70c476b7b675308113edd69a60 before fc2034c431adcbaabf5f8a01912358f07355349e; 27291e2165b6de70c476b7b675308113edd69a60 builds before 44bf3792c10f4bb3de507391f1837e020d92eaa2; 27291e2165b6de70c476b7b675308113edd69a60 builds before 581be9f6085834188cef1ad2f07babf3b421e409; 27291e2165b6de70c476b7b675308113edd69a60 builds before 121ea1de927c8b9bfdf53c31cad27b86d5de0293 | CNA record |
References
- https://git.kernel.org/stable/c/39e7cebb889839b5762c9ad22e2d715b5883b288
- https://git.kernel.org/stable/c/58b1b729a9f90c80b508fc3e2174cbc0ee50859e
- https://git.kernel.org/stable/c/9071f75cbde3bf46119cb28e92cfbef830c4bf97
- https://git.kernel.org/stable/c/5940418e4232a2ff1d30ba12e0d213dbf48f0a83
- https://git.kernel.org/stable/c/fc2034c431adcbaabf5f8a01912358f07355349e
- https://git.kernel.org/stable/c/44bf3792c10f4bb3de507391f1837e020d92eaa2
- https://git.kernel.org/stable/c/581be9f6085834188cef1ad2f07babf3b421e409
- https://git.kernel.org/stable/c/121ea1de927c8b9bfdf53c31cad27b86d5de0293
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.