CVE-2026-98475
Received Received - Intake

s390/cmf Address Confusion in Linux Kernel

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address is an absolute address. Define the associated schib_config and schib fields as dma64_t to enable automatic detection of incorrect assignments. Also add the missing virt_to_dma64() translation. Without this fix, a wrong address will be used by firmware when storing extended format channel measurement data on kernels built with CONFIG_RANDOMIZE_IDENTITY_BASE=y.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98475
EUVD
EUVD-2026-103715

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux 14edd0d73bfef320fd5be11495687ba537aa6341
Linux Linux 14edd0d73bfef320fd5be11495687ba537aa6341
Linux Linux 14edd0d73bfef320fd5be11495687ba537aa6341
Linux Linux 14edd0d73bfef320fd5be11495687ba537aa6341
Linux Linux 6.9

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a confusion between virtual and physical addresses in the s390/cmf component. The issue occurs because the measurement block address is treated as an absolute address without proper translation. The fix ensures correct address handling by defining fields as dma64_t and adding virt_to_dma64() translation to prevent firmware from using wrong addresses when storing channel measurement data.

Impact Analysis

If exploited, this vulnerability could lead to incorrect address usage by firmware, potentially causing system instability or data corruption when storing measurement data. Systems with CONFIG_RANDOMIZE_IDENTITY_BASE=y enabled are specifically affected, as the wrong address might be used during operations.

Mitigation Strategies

Apply the Linux kernel patch that resolves the s390/cmf virtual vs physical address confusion issue. Ensure your system is updated to a kernel version that includes the fix for CONFIG_RANDOMIZE_IDENTITY_BASE=y related address handling.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98475. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart