KVM: s390: Take srcu when importing watchpoint data
Published Sep 16, 2026
7.8
HIGHCVSS 3.1
EPSS 0.18%
Description
__import_wp_info() backs up the original guest memory contents of a watchpoint with read_guest_abs(), which is kvm_read_guest() and therefore resolves the memslot via __kvm_memslots(). That requires kvm->srcu (or kvm->slots_lock) to be held, otherwise a concurrent memslot update can free the memslots array under us once its SRCU grace period has elapsed.
As this is not fast path, following lock ordering (mutex first, then srcu) take the big hammer and hold the srcu for the full import.
Affected products
-
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version
-
- Version 3.16StatusaffectedConstraints-
- Version 0StatusunaffectedConstraints<3.16
- Version 6.1.188StatusunaffectedConstraints<=6.1.*
- Version 6.12.110StatusunaffectedConstraints<=6.12.*
- Version 6.18.51StatusunaffectedConstraints<=6.18.*
- Version 6.6.157StatusunaffectedConstraints<=6.6.*
- Version 7.2.5StatusunaffectedConstraints<=7.2.*
- Version 7.3-rc1StatusunaffectedConstraints<=*
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Linux | Linux | unaffected |
| |||||||||||||||||||||||||||
| Linux | Linux | affected |
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
No CWE recorded.
References (7)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-80522 Advisory
- https://git.kernel.org/stable/c/4c05bf21d1806853e662cc19e744736a3408f155
- https://git.kernel.org/stable/c/6830fbc3724bf49c142aae69a4694f115fa9cedd
- https://git.kernel.org/stable/c/76f5b4ea9ed0aa5a34bda9d8a878f2c73026ec03
- https://git.kernel.org/stable/c/a4e482def8533ebace517d9f67f1465841b1f982
- https://git.kernel.org/stable/c/cc710ee45395efb4937e042960f791d33924e5f6
- https://git.kernel.org/stable/c/f8e3a9997d5ecd56ebe4b262ff424516c068fecb
Change history (0)
No recorded changes yet.