CVE-2026-98930

A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem for the s390 architecture. A local user with access to the KVM interface can trigger a Denial of Service (DoS) by injecting a stop and store status signal into an already stopped virtual CPU (vCPU). In this scenario, the kernel attempts to write to user-space memory while holding an exclusive lock, potentially causing an improper sleep in an atomic context that leads to a host kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.