CVE-2026-89459

Linux · Kernel

A compiler-related issue in the Linux kernel s390 architecture prevents the correct emission of per-CPU instructions, potentially impacting memory integrity and exception handling.

Executive summary

A vulnerability in the Linux kernel s390 per-CPU operations can lead to memory corruption or exception handling failures, necessitating an immediate update to version 7.2.4 or later.

Vulnerability

This flaw involves an assembler macro invocation error in the MVIY_PERCPU function that fails to execute correctly when using older binutils versions. The failure prevents the kernel from properly marking interrupted per-CPU sequences, which can prevent the exception return path from correctly repairing the per-CPU address register.

Business impact

While the CVSS score of 7.0 reflects a high severity, the requirement for local, authenticated access and specific assembler conditions limits the immediate scope. However, successful exploitation could lead to privilege escalation or system instability, as the kernel cannot properly handle exceptions or maintain address register integrity. This poses a significant risk to the reliability and security of systems running sensitive workloads on the s390 architecture.

Remediation

Immediate Action: Update the Linux kernel to version 7.2.4 or later to ensure the MVIY_PERCPU macro is correctly parsed and executed.

Proactive Monitoring: Monitor system logs for unexpected kernel warnings or migration-related exceptions that may indicate underlying memory or register issues.

Compensating Controls: Ensure that systems are compiled with modern binutils versions, as older versions are the primary trigger for this assembler parsing failure.

Exploitation status

Public Exploit Available: Unknown

Analyst recommendation

This vulnerability represents a critical failure in low-level kernel operations that could compromise system stability. Administrators managing Linux environments on s390 architecture should prioritize patching to version 7.2.4 or higher. Given the nature of the flaw, verifying that the kernel is built with current versions of binutils is an essential secondary measure to prevent similar parsing failures in the future.

More Linux CVEs all →

History

CVE Brief tracked this CVE 1 day before it had a CVSS score.

  1. Disclosed CVE record published
  2. Collected by CVE Brief No CVSS score yet; tracked as early warning
  3. CVSS score assigned 7.0 (3.1)
  4. Analyst report written

Sources