CVE-2026-74515

CVE-2026-74515

High · published August 15, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
2.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: pci: Reject adapter interrupt forwarding if already enabled

The MPCIFC instruction doesn't allow registering adapter interrupts without

first unregistering. So reject any request to enable interrupt forwarding

if its already enabled for the zPCI device. This also fixes overwriting and

thus leaking resources when the ioctl is called multiple times for the same

device.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00129 · 2.3th percentile
Published
2026-08-15T17:17Z
References (6)
https://git.kernel.org/stable/c/591952b63a9f976da7d49f719f36ec826ee2a575 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/642d2d1067f7c4d753ae0e3ba5bc98b43cfe3c70 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6837f0ae85fd54cf64c8a0c7c530bba2fae0a207 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6be1ff49ba81f96a6fa55915e6d920be43ac57cc · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/78d9648e7e960546d5b72504a0b0358cd8bb1e9d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8fa01be5a6149404adb82c0979a78f6347edd3ef · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 AUG 12:27Z
    KVM: s390: pci: Reject adapter interrupt forwarding if already enabled
    cvelistv5