---
id: CVE-2026-72290
title: 'KVM: s390: pci: Fix GISC refcount leak on AIF enable failure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  KVM: s390: pci: Fix GISC refcount leak on AIF enable failure

  kvm_s390_gisc_register() registers the guest ISC before pinning
  the guest interrupt forwarding pages and a…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc <
    3882224b0e714f34de91e5f28307c5d3fccfe8f8
  - >-
    Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc <
    6e69317cd44a2f21f8f7a9d93eb3220e868adfa8
  - >-
    Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc <
    6cd6e1c978784eec9032e2fe94a53e62b674fe3e
  - >-
    Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc <
    5fb75c5272950b3ebe8bdee7abfdafd44f38313b
  - >-
    Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc <
    adce12bb0e0dc82d1d6f0821c9faee3145e62a6f
  - >-
    Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc <
    7b69729046a4c58f4cb457184e5ac4aaa179bff4
  - Linux 6.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:54:19.412807Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:25.380Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72290'
references:
  - url: 'https://git.kernel.org/stable/c/3882224b0e714f34de91e5f28307c5d3fccfe8f8'
  - url: 'https://git.kernel.org/stable/c/6e69317cd44a2f21f8f7a9d93eb3220e868adfa8'
  - url: 'https://git.kernel.org/stable/c/6cd6e1c978784eec9032e2fe94a53e62b674fe3e'
  - url: 'https://git.kernel.org/stable/c/5fb75c5272950b3ebe8bdee7abfdafd44f38313b'
  - url: 'https://git.kernel.org/stable/c/adce12bb0e0dc82d1d6f0821c9faee3145e62a6f'
  - url: 'https://git.kernel.org/stable/c/7b69729046a4c58f4cb457184e5ac4aaa179bff4'
tags:
  - cve.org
epss: 0.00215
epssPercentile: 0.11905
ingestedAt: '2026-11-06T18:00:12.582Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: pci: Fix GISC refcount leak on AIF enable failure

kvm_s390_gisc_register() registers the guest ISC before pinning
the guest interrupt forwarding pages and allocating the AISB bit.
If any of the later setup steps fails, the function unwinds the
pinned pages and other local state, but does not unregister the
GISC reference. Add the missing kvm_s390_gisc_unregister() to the
error unwind path.

## Affected

- `Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 3882224b0e714f34de91e5f28307c5d3fccfe8f8`
- `Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 6e69317cd44a2f21f8f7a9d93eb3220e868adfa8`
- `Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 6cd6e1c978784eec9032e2fe94a53e62b674fe3e`
- `Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 5fb75c5272950b3ebe8bdee7abfdafd44f38313b`
- `Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < adce12bb0e0dc82d1d6f0821c9faee3145e62a6f`
- `Linux >= 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc < 7b69729046a4c58f4cb457184e5ac4aaa179bff4`
- `Linux 6.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.