vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-74690

s390/ism: Fix UAF of sba and ieq during ism_dev_exit()

HIGH
8.4
CVSS Score
Published: August 22, 2026 at 03:32 PM UTC
Updated: October 30, 2026 at 01:20 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.4
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() A ism interrupt handler can be active in parallel with ism_dev_exit(), accessing freed data structures. No new interrupts will be generated after unregister_ieq(). Drain ongoing interrupt handlers by free_irq(), before freeing ism data structures.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
4.19684b89bc39ce4f204b1a2b180f39f2eb36a6b695
Vendor states this is fixed in 774394d27930ec4cf4cb3eed8ab6a4d20cb2430a (fixed)
Vendor states this is fixed in b1896543ce59c4258625a35cf41e23a9a1f80ea2 (fixed)
Vendor states this is fixed in fc3021284050ecb3bba8a7851340cedcb5037928 (fixed)
Vendor states this is fixed in 4.19 (unaffected)
Vendor states this is fixed in 6.12.114 (unaffected)
Vendor states this is fixed in 6.18.45 (unaffected)
Vendor states this is fixed in 6.6.160 (unaffected)
Vendor states this is fixed in 7.1.9 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (6)

Source: cverecord
https://git.kernel.org/stable/c/fc3021284050ecb3bba8a7851340cedcb5037928
Source: cverecord
https://git.kernel.org/stable/c/774394d27930ec4cf4cb3eed8ab6a4d20cb2430a
Source: cverecord
https://git.kernel.org/stable/c/b1896543ce59c4258625a35cf41e23a9a1f80ea2
Source: cverecord
https://git.kernel.org/stable/c/950dac9e8c4e3cf68fa8c01f77d3ac3b7369c6a9
Source: cverecord
https://git.kernel.org/stable/c/58803870ba0841e53b630a1290c6838b091dd128
Source: cverecord
https://git.kernel.org/stable/c/9c9a59603b2b016424fe2f9a1cb58c8c2f7198f4

CVSS

8.4HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card