Strix
72.8K

CVE-2026-98648

Unknown

Last modified

CVE-2026-98648 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: s390/uv: Prevent potential out-of-bounds read When the system has more than 85 secrets, the uv_secret_list struct array only holds up to 85 items per page, resulting in an out of bounds read in find_secret_in_page if the targeted secret is in the next page or not stored at all. Fix this by looping over the number of stored secrets which is the per sub-list count of stored secrets and not the overall count..

Description

In the Linux kernel, the following vulnerability has been resolved: s390/uv: Prevent potential out-of-bounds read When the system has more than 85 secrets, the uv_secret_list struct array only holds up to 85 items per page, resulting in an out of bounds read in find_secret_in_page if the targeted secret is in the next page or not stored at all. Fix this by looping over the number of stored secrets which is the per sub-list count of stored secrets and not the overall count.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 7c9137af2042e0d67aae0ccd84afc8ffc4b0d95d, < 04bb5b2eb9f1d56110f14d3a4e31fa2c65fb026f; >= 7c9137af2042e0d67aae0ccd84afc8ffc4b0d95d, < 116bba758533a139bbede8d717a1371bd6d890f6; >= 7c9137af2042e0d67aae0ccd84afc8ffc4b0d95d, < f47190b08b71e8482072978373ee88cb2dfbdaf4
LinuxLinux6.13

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98648?
In the Linux kernel, the following vulnerability has been resolved: s390/uv: Prevent potential out-of-bounds read When the system has more than 85 secrets, the uv_secret_list struct array only holds up to 85 items per page, resulting in an out of bounds read in find_secret_in_page if the targeted secret is in the next page or not stored at all. Fix this by looping over the number of stored secrets which is the per sub-list count of stored secrets and not the overall count.
How severe is CVE-2026-98648?
Severity scoring for CVE-2026-98648 is pending analysis.
How do I fix CVE-2026-98648?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98648?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST