This vulnerability arises in the KVM subsystem of the Linux kernel for the s390 architecture, where a guest that requests to register an interrupt without specifying a summary bit is incorrectly handled. The problematic code assigns the guest AISB location a physical address derived from a NULL pointer instead of storing the value 0. This flaw, a null pointer dereference (CWE‑476), could result in the guest’s AISB being set to an unintended address, which may influence how interrupts are tracked for that guest. No explicit impact such as denial of service or privilege escalation is stated in the advisory; the description merely outlines the erroneous value assignment.

All Linux kernel implementations that provide KVM support for the s390 architecture and have not yet incorporated the fix referenced in the commit logs are susceptible. No specific version ranges are given, so any kernel prior to the application of the patch may be affected. Vendors using Linux:Linux kernels on s390 should verify whether the patch is present.

The CVSS score is 8.8 and EPSS information is unavailable, so the priority of exploitation remains undetermined. The vulnerability is not in CISA's KEV catalog. Based on the description, the most probable attack vector is a guest that can request interrupt registration without a summary bit, which is part of the KVM API; however this inference is drawn from the nature of the bug and is not stated explicitly in the advisory. Without evidence of widespread exploitation, the likelihood appears to be low to moderate, pending further context.