CVE-2026-98473

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config

Three related problems exist in the handling of KVM interrupt and page

resources when a queue is removed from the host's AP configuration

while assigned to a mediated device (mdev).

Problem 1:

~~~~~~~~~

AP_RESPONSE_Q_NOT_AVAIL not handled in vfio_ap_mdev_reset_queue()

When the AP bus removes a queue device whose adapter or domain has

been removed from the host's AP configuration,

vfio_ap_mdev_remove_queue() is called. If the queue is still in the

host's AP configuration at that point, it calls

vfio_ap_mdev_reset_queue(), which issues a PQAP(ZAPQ). Since the

adapter is already gone from the host configuration, ap_zapq() returns

AP_RESPONSE_Q_NOT_AVAIL (0x01). This response code is not handled in

vfio_ap_mdev_reset_queue()'s switch statement and falls through to

the default case, which issues a WARN but does not call

vfio_ap_free_aqic_resour

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References