CVE-2026-98403
Description
In the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid IPL parameter append past command line A command line may occupy all but the terminating byte of COMMAND_LINE_SIZE. In that case append_ipl_block_parm() passes a zero size to the IPL parameter conversion helpers and points the destination one byte past early_command_line. The helpers subtract one from the unsigned size and write the converted parameter outside the command line buffer. Convert the IPL parameter in the command line parsing buffer first. A parameter beginning with '=' can then replace the existing command line regardless of its length, while other parameters are appended only when space remains.
How to fix
- Linux Linuxaf9866021a00ab9eeacf0c33ee73f3d134b4ed70, 73eec5a0d55916d7e1115f5d03a7ffc06d6215cf, 8d11bfec8666f8409fac9072e9c25b691d3e30ac, d76181dfabdaa720703167393704efacba343442 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 5ecb2da660ab8eddafe059a6a8a708465db89ca2 ≤ v < af9866021a00ab9eeacf0c33ee73f3d134b4ed70, 5ecb2da660ab8eddafe059a6a8a708465db89ca2 ≤ v < 73eec5a0d55916d7e1115f5d03a7ffc06d6215cf, 5ecb2da660ab8eddafe059a6a8a708465db89ca2 ≤ v < 8d11bfec8666f8409fac9072e9c25b691d3e30ac, 5ecb2da660ab8eddafe059a6a8a708465db89ca2 ≤ v < d76181dfabdaa720703167393704efacba343442, 5.16 | af9866021a00ab9eeacf0c33ee73f3d134b4ed70, 73eec5a0d55916d7e1115f5d03a7ffc06d6215cf, 8d11bfec8666f8409fac9072e9c25b691d3e30ac, d76181dfabdaa720703167393704efacba343442 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.