Get real-time updates on Telegram
CVE-2026-89921: Linux 3.19
CVE-2026-89921 affects linux. EPSS 0.00209 (percentile 0.10054), scored 06-Oct-2026. Fixed version: 7.2.6-1. Fixed version: 6.12.112-r0. Fixed version: 6.18.53-r0.
Affected technology
Linux · 383d0b050106abecb82f43101cac94fa423af5cd to before b8abc760fa18a389319d977834a30550b3ec18e8, 383d0b050106abecb82f43101cac94fa423af5cd to before 9b046de62b8098af6e2ba820b125ec9dc5f162c8, 383d0b050106abecb82f43101cac94fa423af5cd to before 134f235e0e8de54611a72d3cc3f63e5f31246baa, 383d0b050106abecb82f43101cac94fa423af5cd to before 4e2c7f7cbc27418f9a290399b986c1b85ff93b90
Linux
Linux · 3.19
Linux
Component: Not specified by the source
File: arch/s390/kvm/kvm-s390.c
What an attacker can do
The source says interrupt delivery only uses ext_params2, so nothing leaks to the guest, but a host user can use the migration ioctls to get to the data.
- Product
- linux
- CCR priority
- 0.1 /100 (P5)
- EPSS
- 0.00209 · percentile 0.10181 · 2026-10-11
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-11 23:42:05.235979+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-04 05:55:03.931280+00:00 UTC
- OSV.dev · Source record · observed 2026-10-08 08:57:13.774521+00:00 UTC
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89921.html