{"id":"CVE-2026-98474","title":"s390/pci: Fix missing device lock in zpci_report_status()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/pci: Fix missing device lock in zpci_report_status()\n\nWhen pdev is non-NULL, zpci_report_status() accesses the device's driver.\nTo get a consistent state matching …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 4ec6054e7321dc24ebccaa08b3af0d590f5666e6 < 743a8458978d13d84a1cf74bcd29b9959a75d3a0","Linux >= 4ec6054e7321dc24ebccaa08b3af0d590f5666e6 < 1b957d5c2f737cda731cb1a1b71a7524d54538f2","Linux >= 4ec6054e7321dc24ebccaa08b3af0d590f5666e6 < 0261aef4b15efcee2860ab857e5cb05e9bfa47b0","Linux 6.14"],"published":"2026-10-18","updated":"2026-10-18","sourceUpdated":"2026-10-18T15:15:36.667Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98474","references":[{"url":"https://git.kernel.org/stable/c/743a8458978d13d84a1cf74bcd29b9959a75d3a0"},{"url":"https://git.kernel.org/stable/c/1b957d5c2f737cda731cb1a1b71a7524d54538f2"},{"url":"https://git.kernel.org/stable/c/0261aef4b15efcee2860ab857e5cb05e9bfa47b0"}],"tags":["cve.org"],"ingestedAt":"2026-10-18T15:45:12.298Z","slug":"CVE-2026-98474","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ns390/pci: Fix missing device lock in zpci_report_status()\n\nWhen pdev is non-NULL, zpci_report_status() accesses the device's driver.\nTo get a consistent state matching the recovery, the device lock needs to\nbe held. Do so by expanding the existing device lock critical section.\n\nThe lock only needs to be held when the pdev is non-NULL, so extract\nthe pdev-specific reporting into a helper function which also adds a\nlockdep assertion to detect calls without the device lock held.\n\n## Affected\n\n- `Linux >= 4ec6054e7321dc24ebccaa08b3af0d590f5666e6 < 743a8458978d13d84a1cf74bcd29b9959a75d3a0`\n- `Linux >= 4ec6054e7321dc24ebccaa08b3af0d590f5666e6 < 1b957d5c2f737cda731cb1a1b71a7524d54538f2`\n- `Linux >= 4ec6054e7321dc24ebccaa08b3af0d590f5666e6 < 0261aef4b15efcee2860ab857e5cb05e9bfa47b0`\n- `Linux 6.14`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}