{"id":"CVE-2026-98652","title":"KVM: s390: Add missing srcu in kvm_s390_set_irq_state()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: Add missing srcu in kvm_s390_set_irq_state()\n\nLike kvm_s390_inject_vcpu(), kvm_s390_set_irq_state() also needs the\nkvm->srcu or the slots lock when performin…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= ba5c1e9b6ceebdc39343cc03eb39f077abd3c571 < 7a33007b95c8908ae3980eb2b4c508f8936766df","Linux >= ba5c1e9b6ceebdc39343cc03eb39f077abd3c571 < f3a557067d57ce6ae98d485c8009b223e16f5f36","Linux 2.6.26"],"published":"2026-10-18","updated":"2026-10-18","sourceUpdated":"2026-10-18T15:20:23.975Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98652","references":[{"url":"https://git.kernel.org/stable/c/7a33007b95c8908ae3980eb2b4c508f8936766df"},{"url":"https://git.kernel.org/stable/c/f3a557067d57ce6ae98d485c8009b223e16f5f36"}],"tags":["cve.org"],"ingestedAt":"2026-10-18T15:45:12.226Z","slug":"CVE-2026-98652","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: Add missing srcu in kvm_s390_set_irq_state()\n\nLike kvm_s390_inject_vcpu(), kvm_s390_set_irq_state() also needs the\nkvm->srcu or the slots lock when performing the Store status operation.\n\nFix by taking kvm->srcu in kvm_s390_set_irq_state().\n\n## Affected\n\n- `Linux >= ba5c1e9b6ceebdc39343cc03eb39f077abd3c571 < 7a33007b95c8908ae3980eb2b4c508f8936766df`\n- `Linux >= ba5c1e9b6ceebdc39343cc03eb39f077abd3c571 < f3a557067d57ce6ae98d485c8009b223e16f5f36`\n- `Linux 2.6.26`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}