CVE-2026-68454
Received Received - Intake

KVM: s390 PCI AIF Enable Handling Without AISB

Vulnerability report for CVE-2026-68454, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores 0 for the guest AISB location instead of virt_to_phys(page_address(NULL)).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Linux kernel's KVM (Kernel-based Virtual Machine) implementation for s390 (IBM Z) systems. It involves incorrect handling of PCI interrupt registration when a guest attempts to register IRQs without specifying a summary bit. Instead of properly storing 0 for the guest AISB location, the system incorrectly uses virt_to_phys(page_address(NULL)), which could lead to memory access issues or crashes.

Impact Analysis

If you use virtual machines with KVM on s390 systems, this vulnerability could cause instability or crashes when guests attempt to register PCI interrupts without summary bits. This may lead to guest VM failures, data corruption, or denial of service on affected systems.

Mitigation Strategies

Apply the latest Linux kernel patches to address the KVM s390 pci IRQ handling issue. Update to a kernel version that includes the fix for CVE-2026-68454.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68454. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart