CVE-2026-52968

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM s390 PCI implementation where the GAIT table is indexed using double-scaling pointer arithmetic. The functions kvm s390 pci aif enable(), kvm s390 pci aif disable(), and aen host forward() manually multiply the index by the size of struct zpci gaite. Because aift->gait is already a pointer to that structure, the offset is scaled twice, leading to out-of-bounds memory access when the aisb variable is 32 or greater (given ZPCI NR DEVICES=512).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.