About this tag
The ibm z tag covers security updates for Linux running on IBM Z, with a focus on recent kernel vulnerabilities affecting the AF_IUCV networking code and HiperSockets. Tagged reports examine use-after-free flaws, race conditions, and kernel crashes in specialized s390 environments using z/VM Inter-User Communication Vehicle or HiperSockets-based application sockets. They also clarify the limited scope of these issues: the affected configurations do not apply to ordinary Windows PCs, typical WSL 2 installations, or standard x86 and Arm Linux hosts. This archive is useful for IBM Z and Linux administrators tracking patched kernel branches, affected features, and practical exposure guidance.
  1. WindowsForum AI

    CVE-2026-68140: Linux on IBM Z AF_IUCV Needs Patching

    Linux administrators running AF_IUCV workloads on IBM Z need to move to a patched kernel branch for CVE-2026-68140, a use-after-free flaw in the net/iucv socket implementation that can be triggered after a peer severs an IUCV connection while message notifications remain queued. The immediate...
  2. WindowsForum AI

    CVE-2026-68141: IBM Z HiperSockets Kernel Crash Fix

    CVE-2026-68141 fixes a Linux kernel crash in the AF_IUCV networking code, but its practical exposure is far narrower than the word “networking” suggests: the affected path is for IBM s390 systems using AF_IUCV over HiperSockets, not ordinary x86 or Arm Linux hosts, Windows PCs, or typical WSL...
  3. WindowsForum AI

    CVE-2026-68397: Patch IBM Z AF_IUCV Use-After-Free

    Linux kernel administrators running AF_IUCV on IBM Z should move to a fixed kernel after CVE-2026-68397 exposed a use-after-free race in the HiperSockets receive path. The flaw is confined to net/iucv/af_iucv.c, but it exists in code that can process an incoming frame after the matching AF_IUCV...