CVE-2026-98475

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

s390/cmf: Fix virtual vs physical address confusion

The measurement block address is an absolute address. Define the associated schib_config and schib fields as dma64_t to enable automatic detection of incorrect assignments. Also add the missing virt_to_dma64() translation.

Without this fix, a wrong address will be used by firmware when storing extended format channel measurement data on kernels built with CONFIG_RANDOMIZE_IDENTITY_BASE=y.

Affected product:

AlmaLinux 9.2 ESU , TuxCare 9.6 ESU , TuxCare 9.8 ESU

Affected packages:

kernel @ 5.14.0 (+2 more)

Live-patch status from KernelCare for each operating system.