CVE-2026-98648s390/uv: Prevent potential out-of-bounds read
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: s390/uv: Prevent potential out-of-bounds read When the system has more than 85 secrets, the uv_secret_list struct array only holds up to 85 items per page, resulting in an out of bounds read in find_secret_in_page if the targeted secret is in the next page or not stored at all. Fix this by looping over the number of stored secrets which is the per sub-list count of stored secrets and not the overall count.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | 7c9137af2042e0d67aae0ccd84afc8ffc4b0d95d builds before 04bb5b2eb9f1d56110f14d3a4e31fa2c65fb026f; from 7c9137af2042e0d67aae0ccd84afc8ffc4b0d95d before 116bba758533a139bbede8d717a1371bd6d890f6; from 7c9137af2042e0d67aae0ccd84afc8ffc4b0d95d before f47190b08b71e8482072978373ee88cb2dfbdaf4 | CNA record |
References
- https://git.kernel.org/stable/c/04bb5b2eb9f1d56110f14d3a4e31fa2c65fb026f
- https://git.kernel.org/stable/c/116bba758533a139bbede8d717a1371bd6d890f6
- https://git.kernel.org/stable/c/f47190b08b71e8482072978373ee88cb2dfbdaf4
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.