In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Add missing srcu in kvm_s390_set_irq_state() Like… (CVE-2026-98652)

The vulnerability involved the absence of the SRCU (Sleepable Read-Copy Update) lock in the kvm_s390_set_irq_state() function within the Linux kernel's KVM s390 virtualization code. Like the related function kvm_s390_inject_vcpu(), kvm_s390_set_irq_state() requires holding the kvm->srcu lock or the slots lock when performing Store status operations. The issue was fixed by adding the missing kvm->srcu lock acquisition in kvm_s390_set_irq_state(), ensuring proper synchronization and preventing potential race conditions or inconsistent state.

The vulnerability could lead to improper synchronization in the KVM s390 virtualization subsystem during Store status operations, potentially causing race conditions or inconsistent internal state. No specific exploitation details or impact severity are provided in the source data.

A fix has been implemented by adding the missing SRCU lock in kvm_s390_set_irq_state(). Users should apply the official Linux kernel update that includes this patch to remediate the vulnerability.