vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-89925

KVM: s390: Fix memory leak in guest debug handling

N/A
Published: September 16, 2026 at 10:32 AM UTC
Updated: October 19, 2026 at 09:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory leak in guest debug handling bp_data is freed only for the error case by kfree(bp_data). Every successful KVM_SET_GUEST_DEBUG will leak bp_data.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
27291e2165b6de70c476b7b675308113edd69a603.16
Vendor states this is fixed in 121ea1de927c8b9bfdf53c31cad27b86d5de0293 (fixed)
Vendor states this is fixed in 39e7cebb889839b5762c9ad22e2d715b5883b288 (fixed)
Vendor states this is fixed in 44bf3792c10f4bb3de507391f1837e020d92eaa2 (fixed)
Vendor states this is fixed in 581be9f6085834188cef1ad2f07babf3b421e409 (fixed)
Vendor states this is fixed in 58b1b729a9f90c80b508fc3e2174cbc0ee50859e (fixed)
Vendor states this is fixed in 5940418e4232a2ff1d30ba12e0d213dbf48f0a83 (fixed)
Vendor states this is fixed in 9071f75cbde3bf46119cb28e92cfbef830c4bf97 (fixed)
Vendor states this is fixed in fc2034c431adcbaabf5f8a01912358f07355349e (fixed)
Vendor states this is fixed in 3.16 (unaffected)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.110 (unaffected)
Vendor states this is fixed in 6.18.51 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.5 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/39e7cebb889839b5762c9ad22e2d715b5883b288
Source: cverecord
https://git.kernel.org/stable/c/58b1b729a9f90c80b508fc3e2174cbc0ee50859e
Source: cverecord
https://git.kernel.org/stable/c/9071f75cbde3bf46119cb28e92cfbef830c4bf97
Source: cverecord
https://git.kernel.org/stable/c/5940418e4232a2ff1d30ba12e0d213dbf48f0a83
Source: cverecord
https://git.kernel.org/stable/c/fc2034c431adcbaabf5f8a01912358f07355349e
Source: cverecord
https://git.kernel.org/stable/c/44bf3792c10f4bb3de507391f1837e020d92eaa2
Source: cverecord
https://git.kernel.org/stable/c/581be9f6085834188cef1ad2f07babf3b421e409
Source: cverecord
https://git.kernel.org/stable/c/121ea1de927c8b9bfdf53c31cad27b86d5de0293

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card