Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2026-98474s390/pci: Fix missing device lock in zpci_report_status()

Description

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpci_report_status() When pdev is non-NULL, zpci_report_status() accesses the device's driver. To get a consistent state matching the recovery, the device lock needs to be held. Do so by expanding the existing device lock critical section. The lock only needs to be held when the pdev is non-NULL, so extract the pdev-specific reporting into a helper function which also adds a lockdep assertion to detect calls without the device lock held.

Timeline

  1. ID reserved

    By Linux

  2. · 23 days later

    Published

  3. · 1 day later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.

EPSS (exploitation in 30 days)
0.17% · top 94% of all CVEs (14 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.

Affected products

  • Linux · Linux

    • affected 4ec6054e7321dc24ebccaa08b3af0d590f5666e6 – < 743a8458978d13d84a1cf74bcd29b9959a75d3a0
    • affected 4ec6054e7321dc24ebccaa08b3af0d590f5666e6 – < 1b957d5c2f737cda731cb1a1b71a7524d54538f2
    • affected 4ec6054e7321dc24ebccaa08b3af0d590f5666e6 – < 0261aef4b15efcee2860ab857e5cb05e9bfa47b0

  • Linux · Linux

    • affected 6.14
    • unaffected < 6.14
    • unaffected 6.18.55 – ≤ 6.18.*
    • unaffected 7.2.9 – ≤ 7.2.*
    • unaffected 7.3 – ≤ *

References

References3

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2026-98474 badge
[![CVE-2026-98474](https://cveledger.app/badge/CVE-2026-98474.svg)](https://cveledger.app/cve/CVE-2026-98474)

Record last updated .