Threats tagged 'ghsa-gfv9-x355-hv69'

CVE-2026-89960 is a high-severity vulnerability in the Linux kernel's s390 vfio-ap subsystem. It involves a stale pointer issue in the pqap_hook pointer within the vfio_ap_mdev_set_kvm() function. This stale pointer can lead to a use-after-free condition when a PQAP instruction is executed by a guest, potentially causing kernel memory corruption or crashes. The flaw arises from improper error handling that leaves the pqap_hook pointer referencing a freed matrix_mdev instance. The vulnerability has been fixed by adjusting lock acquisition order and pointer management to prevent stale references and potential deadlocks.