CVE-2026-89924
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix old_data leak in guest debug error path __import_wp_info() allocates a per-watchpoint old_data buffer to back up the original guest memory contents. If a later watchpoint of the same KVM_SET_GUEST_DEBUG request fails to import, kvm_s390_import_bp_data() jumps to the error label, which frees the wp_info array but not the old_data buffers of the entries that were imported successfully. Up to MAX_BP_COUNT - 1 buffers of up to MAX_WP_SIZE bytes are leaked per failed request, and the request can be repeated. Create error handling for cleaning up all created old_data memory areas.
How to fix
- Linux Linux124c81ee610e1fbdd93d4399f88d9e28ba97a941, e5ae7816e5ad145618f7fd568a0e8a94dd9f81f4, c85d402553987777cc4742751437ea5dcbf98a7b, 5fbf319137735252eefa507193c9a619af5b7457, 4048d0a252163084794be3e37995b872c5178913, f55e4d415d95342d5753e528e05a1e8623992c3f, 46cb8a273e2f853f89a78b59dbdff8787b6e1c86, aa9c8e8baf1e765fa65b93212522c636f25d846f or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 27291e2165b6de70c476b7b675308113edd69a60 ≤ v < 124c81ee610e1fbdd93d4399f88d9e28ba97a941, 27291e2165b6de70c476b7b675308113edd69a60 ≤ v < e5ae7816e5ad145618f7fd568a0e8a94dd9f81f4, 27291e2165b6de70c476b7b675308113edd69a60 ≤ v < c85d402553987777cc4742751437ea5dcbf98a7b, 27291e2165b6de70c476b7b675308113edd69a60 ≤ v < 5fbf319137735252eefa507193c9a619af5b7457, 27291e2165b6de70c476b7b675308113edd69a60 ≤ v < 4048d0a252163084794be3e37995b872c5178913, 27291e2165b6de70c476b7b675308113edd69a60 ≤ v < f55e4d415d95342d5753e528e05a1e8623992c3f, 27291e2165b6de70c476b7b675308113edd69a60 ≤ v < 46cb8a273e2f853f89a78b59dbdff8787b6e1c86, 27291e2165b6de70c476b7b675308113edd69a60 ≤ v < aa9c8e8baf1e765fa65b93212522c636f25d846f, 3.16 | 124c81ee610e1fbdd93d4399f88d9e28ba97a941, e5ae7816e5ad145618f7fd568a0e8a94dd9f81f4, c85d402553987777cc4742751437ea5dcbf98a7b, 5fbf319137735252eefa507193c9a619af5b7457, 4048d0a252163084794be3e37995b872c5178913, f55e4d415d95342d5753e528e05a1e8623992c3f, 46cb8a273e2f853f89a78b59dbdff8787b6e1c86, aa9c8e8baf1e765fa65b93212522c636f25d846f |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.