CVE-2026-98466
Received Received - Intake

KVM: arm64 Hyp Stack Page Ownership Transfer Vulnerability

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fix_host_ownership() walks only the linear-map alias of each memblock region, and the per-CPU hyp stack, mapped in the private VA range for its guard page, has none. Walk each stack's VA range with the same walker.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98466
EUVD
EUVD-2026-103706

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
Linux Linux 1a919b17ef012ca0572bae759c27e5ea02bfb47f
Linux Linux 1a919b17ef012ca0572bae759c27e5ea02bfb47f
Linux Linux 1a919b17ef012ca0572bae759c27e5ea02bfb47f
Linux Linux 5.19

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a flaw in the KVM (Kernel-based Virtual Machine) for arm64 systems. The issue occurs when transferring hyp stack pages out of the host stage-2 memory. The function fix_host_ownership() only checks the linear-map alias of each memory block region, missing the per-CPU hyp stack mapped in the private virtual address range for its guard page. This oversight could lead to improper memory handling during virtualization operations.

Impact Analysis

This vulnerability may allow an attacker with local access to a virtual machine to potentially escalate privileges or cause a denial of service by exploiting improper memory management in the KVM hypervisor. It could lead to crashes or instability in the host system running virtualized workloads.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98466. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart