Not yet scoredPublished Sep 16, 2026

CVE-2026-89921KVM: s390: Zero initialize data structures for inject_pfault_token

Updated under an hour ago (Oct 27, 2026, 5:50 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Zero initialize data structures for inject_pfault_token __kvm_inject_pfault_token() only sets .type and .u.ext.ext_params2 of the on-stack struct kvm_s390_irq but the full ext substructure is copied into the cpu local variable on inject. ext_params and pad contain stale stack values. Interrupt delivery only uses ext_params2, so nothing leaks to the guest, but a host user can use the migration ioctls to get to the data. Fix by zero-initializing the irq struct. Do the same for the inti data structure.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 383d0b050106abecb82f43101cac94fa423af5cd before ab1a8a3c9971200938093370da4c67d4427c25f2; from 383d0b050106abecb82f43101cac94fa423af5cd before b8abc760fa18a389319d977834a30550b3ec18e8; 383d0b050106abecb82f43101cac94fa423af5cd builds before 9b046de62b8098af6e2ba820b125ec9dc5f162c8; 383d0b050106abecb82f43101cac94fa423af5cd builds before 134f235e0e8de54611a72d3cc3f63e5f31246baa; 383d0b050106abecb82f43101cac94fa423af5cd builds before 4e2c7f7cbc27418f9a290399b986c1b85ff93b90	CNA record

References

References

https://git.kernel.org/stable/c/ab1a8a3c9971200938093370da4c67d4427c25f2
https://git.kernel.org/stable/c/b8abc760fa18a389319d977834a30550b3ec18e8
https://git.kernel.org/stable/c/9b046de62b8098af6e2ba820b125ec9dc5f162c8
https://git.kernel.org/stable/c/134f235e0e8de54611a72d3cc3f63e5f31246baa
https://git.kernel.org/stable/c/4e2c7f7cbc27418f9a290399b986c1b85ff93b90

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.