CVE-2026-89959

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vfio ap config remove function where the bitmap andnot function is used to clear bits from the matrix mdev->matrix.adm bitmap, which specifies the control domains assigned to the mdev. This behavior prevents explicitly unplugged control domains from being removed from the KVM guest. The issue is resolved by using the bitmap and function instead.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.