Get real-time updates on Telegram
CVE-2026-89957: Linux 6.0
CVE-2026-89957. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00176 (percentile 0.06652), scored 17-Oct-2026.
Affected technology
Linux · eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 to before f58e824de8577fe411f6199d659731a0f86a7275, eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 to before 3a9b049bbdc40165d7f3e20b818eec95e5694d96, eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 to before 753aa3bb1273bc0d36adb013d5915cc8ff6b72a9, eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 to before c45753c32d452d10d8efaeb52587e9e6e8126e33, eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 to before 04b35dd88c108b2d2ceaaa396aba1cb4049d5831, eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 to before 917f509bfb88048094dbb85c4e9dbc4d6fe4a886
Linux
Linux · 6.0
Linux
Component: Not specified by the source
Function: uses
File: drivers/s390/crypto/vfio_ap_ops.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 35.2 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00176 · percentile 0.06652 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89957.html