CVE-2026-98649

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix race in _destroy_pages_crste() Use READ_ONCE() in _destroy_pages_crste() to read the crste, avoid dereferencing the pointer multiple times.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedOct 18, 2026
First seenOct 18, 2026

How to fix

Update
  • Linux Linux90bd832b2bc367991d424d847003ce345b454ffc, 4ca00a9154f998116fba9a32cce5bd938d228065 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxa2c17f9270cc3f1c55c35e8b1d151f41d75b40f5 ≤ v < 90bd832b2bc367991d424d847003ce345b454ffc, a2c17f9270cc3f1c55c35e8b1d151f41d75b40f5 ≤ v < 4ca00a9154f998116fba9a32cce5bd938d228065, 7.090bd832b2bc367991d424d847003ce345b454ffc, 4ca00a9154f998116fba9a32cce5bd938d228065

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-98649 · Linux · Dark Radar