Skip to main content
← All vulnerabilities
CVE-2026-89959

s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.1.188, 6.6.157, 6.12.110, 6.18.51, 7.2.5
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove The vfio_ap_config_remove function uses the bitmap_andnot function to clear bits from the matrix_mdev->matrix.adm bitmap (specifies the control domains assigned to the mdev). This prevents the explicitly unplugged control domains from being removed the KVM guest. The bitmap_and function is used instead.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 · fixed in 12871a4269f139221c9fde9ea3eb69c9228f59d4; From eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 · fixed in 02e72909453dee2f8a09f78819f9a9cb902dfbdc; From eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 · fixed in 4bffadde7fc49b00493fb78c6376f958998d4b8c; From eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 · fixed in f7d66afc34bc6e833c8ebe56973afec35f473bc1; From eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 · fixed in 2ff68bf414de167bc138e6e211ee1ad3ab3c5052; From eeb386aeb5b7c8d2dae6a3ba49255d8a97803182 · fixed in 6b8a02e216f6b520cc029e43ddc83956605135d5

  • Linux Linux

    6.0

  • KernelLinux

    From 6.0.0 · fixed in 6.1.188; From 6.2.0 · fixed in 6.6.157; From 6.7.0 · fixed in 6.12.110; From 6.13.0 · fixed in 6.18.51; From 6.19.0 · fixed in 7.2.5

References 6

git.kernel.org