CVE-2026-74515

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled The MPCIFC instruction doesn't allow registering adapter interrupts without first unregistering. So reject any request to enable interrupt forwarding if its already enabled for the zPCI device. This also fixes overwriting and thus leaking resources when the ioctl is called multiple times for the same device.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.0 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://git.kernel.org/stable/c/591952b63a9f976da7d49f719f36ec826ee2a575
https://git.kernel.org/stable/c/642d2d1067f7c4d753ae0e3ba5bc98b43cfe3c70
https://git.kernel.org/stable/c/6837f0ae85fd54cf64c8a0c7c530bba2fae0a207
https://git.kernel.org/stable/c/6be1ff49ba81f96a6fa55915e6d920be43ac57cc
https://git.kernel.org/stable/c/78d9648e7e960546d5b72504a0b0358cd8bb1e9d
https://git.kernel.org/stable/c/8fa01be5a6149404adb82c0979a78f6347edd3ef

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 13:17

Updated : 2026-08-19 17:21

NVD link : CVE-2026-74515

Mitre link : CVE-2026-74515

CVE.ORG link : CVE-2026-74515

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-74515", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.0}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc", "lessThan": "642d2d1067f7c4d753ae0e3ba5bc98b43cfe3c70", "versionType": "git"}, {"status": "affected", "version": "3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc", "lessThan": "78d9648e7e960546d5b72504a0b0358cd8bb1e9d", "versionType": "git"}, {"status": "affected", "version": "3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc", "lessThan": "6be1ff49ba81f96a6fa55915e6d920be43ac57cc", "versionType": "git"}, {"status": "affected", "version": "3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc", "lessThan": "6837f0ae85fd54cf64c8a0c7c530bba2fae0a207", "versionType": "git"}, {"status": "affected", "version": "3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc", "lessThan": "591952b63a9f976da7d49f719f36ec826ee2a575", "versionType": "git"}, {"status": "affected", "version": "3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc", "lessThan": "8fa01be5a6149404adb82c0979a78f6347edd3ef", "versionType": "git"}], "programFiles": ["arch/s390/kvm/pci.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.0"}, {"status": "unaffected", "version": "0", "lessThan": "6.0", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.183", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.151", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.103", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.44", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.8", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["arch/s390/kvm/pci.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T13:17:56.630", "references": [{"url": "https://git.kernel.org/stable/c/591952b63a9f976da7d49f719f36ec826ee2a575", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/642d2d1067f7c4d753ae0e3ba5bc98b43cfe3c70", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/6837f0ae85fd54cf64c8a0c7c530bba2fae0a207", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/6be1ff49ba81f96a6fa55915e6d920be43ac57cc", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/78d9648e7e960546d5b72504a0b0358cd8bb1e9d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8fa01be5a6149404adb82c0979a78f6347edd3ef", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: pci: Reject adapter interrupt forwarding if already enabled\n\nThe MPCIFC instruction doesn't allow registering adapter interrupts without\nfirst unregistering. So reject any request to enable interrupt forwarding\nif its already enabled for the zPCI device. This also fixes overwriting and\nthus leaking resources when the ioctl is called multiple times for the same\ndevice."}], "lastModified": "2026-08-19T17:21:08.263", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}