Riskcovery

CVE-2026-98648

s390/uv: Prevent potential out-of-bounds read

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/uv: Prevent potential out-of-bounds read

When the system has more than 85 secrets, the uv_secret_list struct array only holds up to 85 items per page, resulting in an out of bounds read in find_secret_in_page if the targeted secret is in the next page or not stored at all.

Fix this by looping over the number of stored secrets which is the per sub-list count of stored secrets and not the overall count.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7c9137af2042e0d67aae0ccd84afc8ffc4b0d95d to before 04bb5b2eb9f1d56110f14d3a4e31fa2c65fb026fAffected
  • 7c9137af2042e0d67aae0ccd84afc8ffc4b0d95d to before 116bba758533a139bbede8d717a1371bd6d890f6Affected
  • 7c9137af2042e0d67aae0ccd84afc8ffc4b0d95d to before f47190b08b71e8482072978373ee88cb2dfbdaf4Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.18.55 through 6.18.*Not affected
  • 7.2.9 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.