CVE-2026-89959
High
Description
In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove The vfio_ap_config_remove function uses the bitmap_andnot function to clear bits from the matrix_mdev->matrix.adm bitmap (specifies the control domains assigned to the mdev). This prevents the explicitly unplugged control domains from being removed the KVM guest. The bitmap_and function is used instead.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Linux
PublishedSep 16, 2026
First seenSep 16, 2026
How to fix
Update
- Linux Linux12871a4269f139221c9fde9ea3eb69c9228f59d4, 02e72909453dee2f8a09f78819f9a9cb902dfbdc, 4bffadde7fc49b00493fb78c6376f958998d4b8c, f7d66afc34bc6e833c8ebe56973afec35f473bc1, 2ff68bf414de167bc138e6e211ee1ad3ab3c5052, 6b8a02e216f6b520cc029e43ddc83956605135d5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 ≤ v < 12871a4269f139221c9fde9ea3eb69c9228f59d4, eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 ≤ v < 02e72909453dee2f8a09f78819f9a9cb902dfbdc, eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 ≤ v < 4bffadde7fc49b00493fb78c6376f958998d4b8c, eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 ≤ v < f7d66afc34bc6e833c8ebe56973afec35f473bc1, eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 ≤ v < 2ff68bf414de167bc138e6e211ee1ad3ab3c5052, eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 ≤ v < 6b8a02e216f6b520cc029e43ddc83956605135d5, 6.0 | 12871a4269f139221c9fde9ea3eb69c9228f59d4, 02e72909453dee2f8a09f78819f9a9cb902dfbdc, 4bffadde7fc49b00493fb78c6376f958998d4b8c, f7d66afc34bc6e833c8ebe56973afec35f473bc1, 2ff68bf414de167bc138e6e211ee1ad3ab3c5052, 6b8a02e216f6b520cc029e43ddc83956605135d5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.