CVE-2026-89924

KVM: s390: Fix old_data leak in guest debug error path

State: Published
Severity: Not scored
Published: Sep 16, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: Fix old_data leak in guest debug error path

__import_wp_info() allocates a per-watchpoint old_data buffer to back up the original guest memory contents. If a later watchpoint of the same KVM_SET_GUEST_DEBUG request fails to import, kvm_s390_import_bp_data() jumps to the error label, which frees the wp_info array but not the old_data buffers of the entries that were imported successfully. Up to MAX_BP_COUNT - 1 buffers of up to MAX_WP_SIZE bytes are leaked per failed request, and the request can be repeated.

Create error handling for cleaning up all created old_data memory areas.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	27291e2165b6de70c476b7b675308113edd69a60 to before 124c81ee610e1fbdd93d4399f88d9e28ba97a941Affected 27291e2165b6de70c476b7b675308113edd69a60 to before e5ae7816e5ad145618f7fd568a0e8a94dd9f81f4Affected 27291e2165b6de70c476b7b675308113edd69a60 to before c85d402553987777cc4742751437ea5dcbf98a7bAffected 27291e2165b6de70c476b7b675308113edd69a60 to before 5fbf319137735252eefa507193c9a619af5b7457Affected 27291e2165b6de70c476b7b675308113edd69a60 to before 4048d0a252163084794be3e37995b872c5178913Affected 27291e2165b6de70c476b7b675308113edd69a60 to before f55e4d415d95342d5753e528e05a1e8623992c3fAffected 27291e2165b6de70c476b7b675308113edd69a60 to before 46cb8a273e2f853f89a78b59dbdff8787b6e1c86Affected 27291e2165b6de70c476b7b675308113edd69a60 to before aa9c8e8baf1e765fa65b93212522c636f25d846fAffected
LinuxLinux	3.16Affected before 3.16Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.51 through 6.18.Not affected 7.2.5 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

27291e2165b6de70c476b7b675308113edd69a60 to before 124c81ee610e1fbdd93d4399f88d9e28ba97a941Affected
27291e2165b6de70c476b7b675308113edd69a60 to before e5ae7816e5ad145618f7fd568a0e8a94dd9f81f4Affected
27291e2165b6de70c476b7b675308113edd69a60 to before c85d402553987777cc4742751437ea5dcbf98a7bAffected
27291e2165b6de70c476b7b675308113edd69a60 to before 5fbf319137735252eefa507193c9a619af5b7457Affected
27291e2165b6de70c476b7b675308113edd69a60 to before 4048d0a252163084794be3e37995b872c5178913Affected
27291e2165b6de70c476b7b675308113edd69a60 to before f55e4d415d95342d5753e528e05a1e8623992c3fAffected
27291e2165b6de70c476b7b675308113edd69a60 to before 46cb8a273e2f853f89a78b59dbdff8787b6e1c86Affected
27291e2165b6de70c476b7b675308113edd69a60 to before aa9c8e8baf1e765fa65b93212522c636f25d846fAffected

LinuxLinux

3.16Affected
before 3.16Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.51 through 6.18.*Not affected
7.2.5 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.