CVE-2026-68454

HighCVSS 8.8/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: pci: Fix handling of AIF enable without AISB

When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores 0 for the guest AISB location instead of virt_to_phys(page_address(NULL)).

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc, < f887df91826e72b570c5e9298e66dd929f09edde; >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc, < 3ef3190e30601b2688bdc64169b938b8d7f42010; >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc, < d48b9b096d11e31690c0a4988f65f21b64c01b2a; >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc, < df72596278b0e22dac5ef2881e9221a3a2c4ed11; >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc, < 124a3769c43713a11a93a821b313e61ad5110cb8; >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc, < 3e3aa6da87d30a0064a17b836685cd43c90a3572
LinuxLinux6.0

References

Timeline

Published
Aug 13, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-68455In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessCVE-2026-68456In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() ueagCVE-2026-684579.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for FSCTL mutations SET_SPARSE, SET_ZEROCVE-2026-684587.8In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it binder_transaction(CVE-2026-68459In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() WheCVE-2026-68467.8A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object CVE-2026-68460In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in f2fs_balance_fs() When the f2fs filesyCVE-2026-684617.8In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnode_handle in fwCVE-2026-684627.8In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative const offsets for buffer pointers The verifier reCVE-2026-68463In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend ReplaCVE-2026-68464In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interCVE-2026-68465In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default stat
CVE-2026-68454: High severity, CVSS 8.8 | Vulnix