CVE-2026-98653
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix _gaccess_shadow_fault() In some circumstances, it is possible that the page of nested guest memory that is being shadowed is not present at all in the parent guest gmap. dat_entry_walk() will not find any leaf entry and return with -ENOENT, which will erroneously be propagated all the way to userspace. Fix by manually calling gmap_link() on the memory of the nested guest that is being shadowed if the mapping was not already present.
Affected versions
Linux kernel versions
7.0
and later are affected. Fixed in
7.2.9,
7.3
and their respective stable series.
References
2 totalFrequently asked questions
-
What is CVE-2026-98653?
CVE-2026-98653 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 7.0 onward and has been patched in 7.2.9 and 7.3. CVE-2026-98653 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-98653?
Yes. CVE-2026-98653 has been patched. Fixed versions include 7.2.9 and 7.3. If you are running Linux kernel 7.0 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-98653 actively exploited?
No. CVE-2026-98653 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.