---
id: CVE-2026-98475
title: 's390/cmf: Fix virtual vs physical address confusion'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/cmf: Fix virtual vs physical address confusion

  The measurement block address is an absolute address. Define the
  associated schib_config and schib fields as dma64_…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 14edd0d73bfef320fd5be11495687ba537aa6341 <
    b11f369be31ea11c746833e4d3ad51dcd6b5fa2b
  - >-
    Linux >= 14edd0d73bfef320fd5be11495687ba537aa6341 <
    748ec2f7f5df9b4fc742546a8bfc8aa5d847353e
  - >-
    Linux >= 14edd0d73bfef320fd5be11495687ba537aa6341 <
    7f78226eb743b362f52b212d7763801642539d1c
  - >-
    Linux >= 14edd0d73bfef320fd5be11495687ba537aa6341 <
    f4d04425e66af2ecee9d1a49ae0484436f3c2fd1
  - Linux 6.9
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:15:44.206Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98475'
references:
  - url: 'https://git.kernel.org/stable/c/b11f369be31ea11c746833e4d3ad51dcd6b5fa2b'
  - url: 'https://git.kernel.org/stable/c/748ec2f7f5df9b4fc742546a8bfc8aa5d847353e'
  - url: 'https://git.kernel.org/stable/c/7f78226eb743b362f52b212d7763801642539d1c'
  - url: 'https://git.kernel.org/stable/c/f4d04425e66af2ecee9d1a49ae0484436f3c2fd1'
tags:
  - cve.org
ingestedAt: '2026-10-18T15:45:12.296Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

s390/cmf: Fix virtual vs physical address confusion

The measurement block address is an absolute address. Define the
associated schib_config and schib fields as dma64_t to enable automatic
detection of incorrect assignments. Also add the missing virt_to_dma64()
translation.

Without this fix, a wrong address will be used by firmware when storing
extended format channel measurement data on kernels built with
CONFIG_RANDOMIZE_IDENTITY_BASE=y.

## Affected

- `Linux >= 14edd0d73bfef320fd5be11495687ba537aa6341 < b11f369be31ea11c746833e4d3ad51dcd6b5fa2b`
- `Linux >= 14edd0d73bfef320fd5be11495687ba537aa6341 < 748ec2f7f5df9b4fc742546a8bfc8aa5d847353e`
- `Linux >= 14edd0d73bfef320fd5be11495687ba537aa6341 < 7f78226eb743b362f52b212d7763801642539d1c`
- `Linux >= 14edd0d73bfef320fd5be11495687ba537aa6341 < f4d04425e66af2ecee9d1a49ae0484436f3c2fd1`
- `Linux 6.9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.