SB2026081692 - Improper resource shutdown or release in Linux kernel s390 kvm
Published: August 16, 2026
Security Bulletin ID
SB2026081692
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Partial DoS
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Improper resource shutdown or release (CVE-ID: CVE-2026-72290)
CWE-ID: CWE-404 - Improper Resource Shutdown or Release
CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper resource shutdown or release in kvm_s390_pci_aif_enable() when handling AIF enablement errors. A local user can trigger a failure during AIF enablement to cause a denial of service.
The issue affects the s390 KVM PCI interrupt setup error path.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/3882224b0e714f34de91e5f28307c5d3fccfe8f8
- https://git.kernel.org/stable/c/5fb75c5272950b3ebe8bdee7abfdafd44f38313b
- https://git.kernel.org/stable/c/6cd6e1c978784eec9032e2fe94a53e62b674fe3e
- https://git.kernel.org/stable/c/6e69317cd44a2f21f8f7a9d93eb3220e868adfa8
- https://git.kernel.org/stable/c/7b69729046a4c58f4cb457184e5ac4aaa179bff4
- https://git.kernel.org/stable/c/adce12bb0e0dc82d1d6f0821c9faee3145e62a6f