CVE-2026-93238

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the s390/vfio-ap component where the DECLARE BITMAP(apm filtered, AP DEVICES) macro allocates a bitmap on the stack without zero-initializing it. In the vfio ap mdev hot plug cfg() function, the vfio ap mdev filter matrix() function is only called to populate apm filtered if filter adapters or filter domains is true. If a hot plug configuration change only adds control domains (where filter cdoms is true, but filter adapters and filter domains are both false), the initialization is bypassed. As a result, apm filtered is passed to reset queues for apids() containing uninitialized stack garbage, which may be interpreted as valid APIDs to reset, leading to unintended guest hardware queue resets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.