CVE-2026-68454

Published: Aug 13, 2026Modified: Oct 19, 2026

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores 0 for the guest AISB location instead of virt_to_phys(page_address(NULL)).

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

https://git.kernel.org/stable/c/124a3769c43713a11a93a821b313e61ad5110cb8

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

https://git.kernel.org/stable/c/3e3aa6da87d30a0064a17b836685cd43c90a3572

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

https://git.kernel.org/stable/c/3ef3190e30601b2688bdc64169b938b8d7f42010

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

https://git.kernel.org/stable/c/d48b9b096d11e31690c0a4988f65f21b64c01b2a

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

https://git.kernel.org/stable/c/df72596278b0e22dac5ef2881e9221a3a2c4ed11

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

https://git.kernel.org/stable/c/f887df91826e72b570c5e9298e66dd929f09edde

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Timeline

No history available yet.