Signals
Back to database
Schedule30Medium5.5VulnerabilityCVE-2026-98164Patch link available

CVE-2026-98164 — In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvm_gfn_is_write_tra…

Published Sep 29, 2026, 01:17 PM UTCIngested 9d agoSource NVD(cve-db)CVE-2026-98164

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvm_gfn_is_write_tracked() checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can therefore be write-tracked in one address space and appear untracked through the other. Check the supplied slot first, then the slot for the other address space. This ensures all callers honor write tracking regardless of the active address space. In particular, it prevents mmu_try_to_unsync_pages() from marking an upper-level shadow page unsync and eventually triggering the BUG in pte_list_remove(). [invert direction of the conditional. - Paolo]

CVSS v3.1 base metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
5.5

Medium severity

Band computed from the CVSS base score, not the source's own label — so it means the same thing across every feed.

AV

Local

Attack Vector

AC

Low

Attack Complexity

PR

Low

Privileges Required

UI

None

User Interaction

S

Unchanged

Scope

C

None

Confidentiality

I

None

Integrity

A

High

Availability

Affected

Vendor
linux
Product
linux kernel

Versions

  • >= 4.2, < 6.1.187
  • >= 6.2, < 6.6.156
  • >= 6.7, < 6.12.108
  • >= 6.13, < 6.18.49
  • >= 6.19, < 7.1.13
  • 7.2

Stated as the source expressed them.

References

Related threats

same CWE or vendor
Low

CVE-2026-107284 — The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses.

CVE-2026-107284 · 1d ago

Low

CVE-2026-106586 — In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a differe…

CVE-2026-106586 · 2d ago

Medium

CVE-2026-102124 — A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configuration.

CVE-2026-102124 · 8d ago

Medium

CVE-2026-102110 — An endpoint used during initial appliance setup did not require authentication and did not correctly enforce its intended state precondition, so du…

CVE-2026-102110 · 8d ago

Critical

CVE-2026-96760 — Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability.

CVE-2026-96760 · 10d ago

High

CVE-2026-98163 — In the Linux kernel, the following vulnerability has been resolved: cgroup: Avoid iteration of dying tasks with zero refcount The commit 260fbcb9…

CVE-2026-98163 · 13d ago