Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q4fh-xh4r-x3xp

Опубликовано: 28 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.3

Описание

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: pci: Fix NULL dereference on AIBV allocation failure

The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: pci: Fix NULL dereference on AIBV allocation failure

The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.

EPSS

Процентиль: 4%
0.00144
Низкий

9.3 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.3
ubuntu
20 дней назад

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.

CVSS3: 5.5
redhat
20 дней назад

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.

CVSS3: 9.3
nvd
20 дней назад

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.

msrc
19 дней назад

KVM: s390: pci: Fix NULL dereference on AIBV allocation failure

CVSS3: 9.3
debian
20 дней назад

In the Linux kernel, the following vulnerability has been resolved: K ...

EPSS

Процентиль: 4%
0.00144
Низкий

9.3 Critical

CVSS3