CVE-2026-89925
kernel: KVM: s390: Fix memory leak in guest debug handling
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 16, 2026
Updated · October 29, 2026
Description
A flaw was found in KVM's guest debug handling within the Linux kernel. A local user, by repeatedly calling KVM_SET_GUEST_DEBUG, can trigger a memory leak. This occurs because the bp_data is not freed after a successful debug operation. Over time, this can lead to resource exhaustion and a Denial of Service (DoS) on the system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime