CVE-2026-89925

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory leak in guest debug handling bp_data is freed only for the error case by kfree(bp_data). Every successful KVM_SET_GUEST_DEBUG will leak bp_data.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/121ea1de927c8b9bfdf53c31cad27b86d5de0293
https://git.kernel.org/stable/c/39e7cebb889839b5762c9ad22e2d715b5883b288
https://git.kernel.org/stable/c/44bf3792c10f4bb3de507391f1837e020d92eaa2
https://git.kernel.org/stable/c/581be9f6085834188cef1ad2f07babf3b421e409
https://git.kernel.org/stable/c/58b1b729a9f90c80b508fc3e2174cbc0ee50859e
https://git.kernel.org/stable/c/5940418e4232a2ff1d30ba12e0d213dbf48f0a83
https://git.kernel.org/stable/c/9071f75cbde3bf46119cb28e92cfbef830c4bf97
https://git.kernel.org/stable/c/fc2034c431adcbaabf5f8a01912358f07355349e

Configurations

No configuration.

History

No history.

Information

Published : 2026-09-16 11:17

Updated : 2026-09-16 11:17

NVD link : CVE-2026-89925

Mitre link : CVE-2026-89925

CVE.ORG link : CVE-2026-89925

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-89925", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "27291e2165b6de70c476b7b675308113edd69a60", "lessThan": "39e7cebb889839b5762c9ad22e2d715b5883b288", "versionType": "git"}, {"status": "affected", "version": "27291e2165b6de70c476b7b675308113edd69a60", "lessThan": "58b1b729a9f90c80b508fc3e2174cbc0ee50859e", "versionType": "git"}, {"status": "affected", "version": "27291e2165b6de70c476b7b675308113edd69a60", "lessThan": "9071f75cbde3bf46119cb28e92cfbef830c4bf97", "versionType": "git"}, {"status": "affected", "version": "27291e2165b6de70c476b7b675308113edd69a60", "lessThan": "5940418e4232a2ff1d30ba12e0d213dbf48f0a83", "versionType": "git"}, {"status": "affected", "version": "27291e2165b6de70c476b7b675308113edd69a60", "lessThan": "fc2034c431adcbaabf5f8a01912358f07355349e", "versionType": "git"}, {"status": "affected", "version": "27291e2165b6de70c476b7b675308113edd69a60", "lessThan": "44bf3792c10f4bb3de507391f1837e020d92eaa2", "versionType": "git"}, {"status": "affected", "version": "27291e2165b6de70c476b7b675308113edd69a60", "lessThan": "581be9f6085834188cef1ad2f07babf3b421e409", "versionType": "git"}, {"status": "affected", "version": "27291e2165b6de70c476b7b675308113edd69a60", "lessThan": "121ea1de927c8b9bfdf53c31cad27b86d5de0293", "versionType": "git"}], "programFiles": ["arch/s390/kvm/guestdbg.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.16"}, {"status": "unaffected", "version": "0", "lessThan": "3.16", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.270", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.221", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.188", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.157", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.110", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.51", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.2.5", "versionType": "semver", "lessThanOrEqual": "7.2.*"}, {"status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["arch/s390/kvm/guestdbg.c"], "defaultStatus": "affected"}]}], "published": "2026-09-16T11:17:01.653", "references": [{"url": "https://git.kernel.org/stable/c/121ea1de927c8b9bfdf53c31cad27b86d5de0293", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/39e7cebb889839b5762c9ad22e2d715b5883b288", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/44bf3792c10f4bb3de507391f1837e020d92eaa2", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/581be9f6085834188cef1ad2f07babf3b421e409", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/58b1b729a9f90c80b508fc3e2174cbc0ee50859e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/5940418e4232a2ff1d30ba12e0d213dbf48f0a83", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/9071f75cbde3bf46119cb28e92cfbef830c4bf97", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/fc2034c431adcbaabf5f8a01912358f07355349e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: Fix memory leak in guest debug handling\n\nbp_data is freed only for the error case by kfree(bp_data).\nEvery successful KVM_SET_GUEST_DEBUG will leak bp_data."}], "lastModified": "2026-09-16T11:17:01.653", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}