{"id":"CVE-2026-68454","title":"KVM: s390: pci: Fix handling of AIF enable without AISB","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: pci: Fix handling of AIF enable without AISB\n\nWhen a guest seeks to register IRQs without a summary bit specified,\nensure that the associated GAITE then stor…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < f887df91826e72b570c5e9298e66dd929f09edde","Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 3ef3190e30601b2688bdc64169b938b8d7f42010","Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < d48b9b096d11e31690c0a4988f65f21b64c01b2a","Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < df72596278b0e22dac5ef2881e9221a3a2c4ed11","Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 124a3769c43713a11a93a821b313e61ad5110cb8","Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 3e3aa6da87d30a0064a17b836685cd43c90a3572","Linux 6.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-16T15:49:23.202156Z"},"published":"2026-08-13","updated":"2026-10-16","sourceUpdated":"2026-10-16T15:53:14.564Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-68454","references":[{"url":"https://git.kernel.org/stable/c/f887df91826e72b570c5e9298e66dd929f09edde"},{"url":"https://git.kernel.org/stable/c/3ef3190e30601b2688bdc64169b938b8d7f42010"},{"url":"https://git.kernel.org/stable/c/d48b9b096d11e31690c0a4988f65f21b64c01b2a"},{"url":"https://git.kernel.org/stable/c/df72596278b0e22dac5ef2881e9221a3a2c4ed11"},{"url":"https://git.kernel.org/stable/c/124a3769c43713a11a93a821b313e61ad5110cb8"},{"url":"https://git.kernel.org/stable/c/3e3aa6da87d30a0064a17b836685cd43c90a3572"}],"tags":["cve.org"],"epss":0.00129,"epssPercentile":0.02254,"ingestedAt":"2026-10-16T17:24:46.868Z","slug":"CVE-2026-68454","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: pci: Fix handling of AIF enable without AISB\n\nWhen a guest seeks to register IRQs without a summary bit specified,\nensure that the associated GAITE then stores 0 for the guest AISB\nlocation instead of virt_to_phys(page_address(NULL)).\n\n## Affected\n\n- `Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < f887df91826e72b570c5e9298e66dd929f09edde`\n- `Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 3ef3190e30601b2688bdc64169b938b8d7f42010`\n- `Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < d48b9b096d11e31690c0a4988f65f21b64c01b2a`\n- `Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < df72596278b0e22dac5ef2881e9221a3a2c4ed11`\n- `Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 124a3769c43713a11a93a821b313e61ad5110cb8`\n- `Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 3e3aa6da87d30a0064a17b836685cd43c90a3572`\n- `Linux 6.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}