CVE-2026-89925: KVM: s390: Fix memory leak in guest debug handling
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: Fix memory leak in guest debug handling
bpdata is freed only for the error case by kfree(bpdata). Every successful KVMSETGUESTDEBUG will leak bpdata.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this leak?
The issue is in KVM guest debug handling for s390. Systems using the Linux kernel's KVM s390 virtualization support and issuing successful KVM_SET_GUEST_DEBUG operations are exposed.
What must occur for memory to be leaked?
A successful KVM_SET_GUEST_DEBUG operation leaks the bp_data allocation. The description indicates that bp_data is freed only on the error path, not after successful requests.
How can I determine whether a system may be affected?
Review whether the host uses KVM on s390 and whether guest-debug configuration requests are being made through KVM_SET_GUEST_DEBUG. The provided data does not identify affected kernel versions or a runtime indicator of already leaked memory.