CVE-2026-98649

CVE-2026-98649

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
8.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: Fix race in _destroy_pages_crste()

Use READ_ONCE() in _destroy_pages_crste() to read the crste, avoid

dereferencing the pointer multiple times.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00189 · 8.1th percentile
Published
2026-10-18T20:17Z
References (2)
https://git.kernel.org/stable/c/4ca00a9154f998116fba9a32cce5bd938d228065 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/90bd832b2bc367991d424d847003ce345b454ffc · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:20Z
    KVM: s390: Fix race in _destroy_pages_crste()
    cvelistv5
  • 18 OCT 15:20Z
    KVM: s390: Fix race in _destroy_pages_crste()
    cvelistv5