CVE-2026-98649

A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem on s390 architectures. A local attacker can exploit this vulnerability to cause a Denial of Service (DoS) or memory corruption by triggering a race condition during guest memory page destruction. This issue occurs because memory management table entries are read multiple times concurrently without proper synchronization, allowing values to change between validation and use.

This vulnerability is evaluated with a Moderate impact because exploitation demands local privileges on s390x systems and depends on winning a race condition to disrupt guest memory management. Furthermore, the commit that introduced this flaw is not present in supported Red Hat Enterprise Linux kernels, leaving supported Red Hat products unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.