AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-68454

HIGH · CVSS 8.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-13 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's KVM component, specifically in the handling of IRQ registration for s390 architecture guests when the summary bit is not specified. This flaw could lead to incorrect memory address handling, potentially allowing unauthorized access or manipulation of guest memory. Organizations utilizing KVM on s390 systems should prioritize this fix to mitigate potential security risks associated with guest isolation and memory integrity.

CVE
CVE-2026-68454
Severity
HIGH
CVSS
8.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores 0 for the guest AISB location instead of virt_to_phys(page_address(NULL)).