CVE-2026-98648

CVE-2026-98648

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

s390/uv: Prevent potential out-of-bounds read

When the system has more than 85 secrets, the uv_secret_list struct

array only holds up to 85 items per page, resulting in an out of bounds

read in find_secret_in_page if the targeted secret is in the next page

or not stored at all.

Fix this by looping over the number of stored secrets which is the

per sub-list count of stored secrets and not the overall count.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00166 · 5.5th percentile
Published
2026-10-18T20:17Z
References (3)
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:20Z
    s390/uv: Prevent potential out-of-bounds read
    cvelistv5
  • 18 OCT 15:20Z
    s390/uv: Prevent potential out-of-bounds read
    cvelistv5