KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.20 % · centile 9 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.
Références
- https://git.kernel.org/stable/c/96099486b63985801c9c6ef22505e9aa635b2d20
- https://git.kernel.org/stable/c/0a95abe964400771ad82b027d7b84a0d183cd0db
- https://git.kernel.org/stable/c/df947d85e164a50a29d43a96e814f69ab1d0f7ed
- https://git.kernel.org/stable/c/e137d082325bbcae780087b57501d38585e625d9
- https://git.kernel.org/stable/c/d1a103dc9016c25e7423ce5841a5cc2df76d59f3
- https://git.kernel.org/stable/c/8bf09b9b7d3232806df95f409581f8a9fd99a3fa
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | CRITICAL 9.3 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | Linux |
| CVSS 3.1 | CRITICAL 9.3 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2026-67560
- GCVE · GCVE-0-2026-80684
Avis du CERT-FR
- CERTFR-2026-AVI-1232 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 96099486b63985801c9c6ef22505e9aa635b2d20 ; affected 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 0a95abe964400771ad82b027d7b84a0d183cd0db ; affected 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < df947d85e164a50a29d43a96e814f69ab1d0f7ed ; affected 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < e137d082325bbcae780087b57501d38585e625d9 ; affected 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < d1a103dc9016c25e7423ce5841a5cc2df76d59f3 ; affected 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 8bf09b9b7d3232806df95f409581f8a9fd99a3fa |
| Linux · Linux | affected 6.0 ; unaffected 0 < 6.0 ; unaffected 6.1.183 ≤ 6.1.* ; unaffected 6.6.151 ≤ 6.6.* ; unaffected 6.12.103 ≤ 6.12.* ; unaffected 6.18.44 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |