CVE-2026-89926

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM s390 architecture within the import wp info() function. The len field of the kvm hw breakpoint structure, which is controlled by user space, is assigned to an integer variable. Because the bounds check is performed on the truncated integer value while the memory allocation uses the original untruncated 64-bit value, a user can trigger allocations exceeding 4GB. This leads to allocation failures and results in a system warning due to MAX PAGE ORDER (the maximum number of pages that can be allocated in a single request).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.