CVE-2026-89795

A flaw was found in the Linux kernel's s390 PCI (Peripheral Component Interconnect) hotplug driver. On s390 systems, an incorrect assignment of PCI slot objects to multifunction devices can lead to the wrong PCI function being reset when a reset operation is initiated through the hotplug driver. This issue also causes a memory leak, potentially impacting system stability and resource availability.

This vulnerability is rated as having a Low impact because exploitation is constrained to the IBM Z (s390x) architecture and requires local administrative privileges to trigger PCI hotplug slot reset actions. Non-s390x architectures, including x86_64, aarch64, and ppc64le, are entirely unaffected. On affected s390x systems, the flaw only manifests when resetting multifunction pass-through PCI devices, potentially resulting in unintended function resets or gradual memory leakage without compromising confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.