Answer in brief
CVE-2026-89925 records a Unknown severity vulnerability in KVM: s390: Fix memory leak in guest debug handling. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=27291e2165b6de70c476b7b675308113edd69a60 <39e7cebb889839b5762c9ad22e2d715b5883b288 || >=27291e2165b6de70c476b7b675308113edd69a60 <58b1b729a9f90c80b508fc3e2174cbc0ee50859e || >=27291e2165b6de70c476b7b675308113edd69a60 <9071f75cbde3bf46119cb28e92cfbef830c4bf97 || >=27291e2165b6de70c476b7b675308113edd69a60 <5940418e4232a2ff1d30ba12e0d213dbf48f0a83 || >=27291e2165b6de70c476b7b675308113edd69a60 <fc2034c431adcbaabf5f8a01912358f07355349e || >=27291e2165b6de70c476b7b675308113edd69a60 <44bf3792c10f4bb3de507391f1837e020d92eaa2 || >=27291e2165b6de70c476b7b675308113edd69a60 <581be9f6085834188cef1ad2f07babf3b421e409 || >=27291e2165b6de70c476b7b675308113edd69a60 <121ea1de927c8b9bfdf53c31cad27b86d5de0293 | 39e7cebb889839b5762c9ad22e2d715b5883b288, 58b1b729a9f90c80b508fc3e2174cbc0ee50859e, 9071f75cbde3bf46119cb28e92cfbef830c4bf97, 5940418e4232a2ff1d30ba12e0d213dbf48f0a83, fc2034c431adcbaabf5f8a01912358f07355349e, 44bf3792c10f4bb3de507391f1837e020d92eaa2, 581be9f6085834188cef1ad2f07babf3b421e409, 121ea1de927c8b9bfdf53c31cad27b86d5de0293 |
| Linux/Linuxgeneric | 3.16 | Not reported |
Published upstream
Sep 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 16, 2026
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory leak in guest debug handling bp_data is freed only for the error case by kfree(bp_data). Every successful KVM_SET_GUEST_DEBUG will leak bp_data.
Quoted source text, attributed separately from HOL analysis.