Most recent entries from all

fkie_cve-2026-98466

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Transfer the hyp stack pages out of the host stage-2

fix_host_ownership() walks only the linear-map alias of each memblock region, and the per-CPU hyp stack, mapped in the private VA range for its guard page, has none.

Walk each stack's VA range with the same walker.

GHSA-7374-3pfm-f9q8

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Transfer the hyp stack pages out of the host stage-2

fix_host_ownership() walks only the linear-map alias of each memblock region, and the per-CPU hyp stack, mapped in the private VA range for its guard page, has none.

Walk each stack's VA range with the same walker.

msrc_CVE-2026-98466 — KVM: arm64: Transfer the hyp stack pages out of the host stage-2

msrc_CVE-2026-98466

RHSA-2026:93412 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

kernel: sctp: stream: fully roll back denied add-stream state kernel: ipv6: sit: reload inner IPv6 header after GSO offloads kernel: ipvs: clear the svc scheduler ptr early on edit kernel: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path kernel: mptcp: pm: userspace: fix use-after-free in get_local_id kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE kernel: tipc: require net admin for TIPCv2 netlink mutators kernel: Bluetooth: mgmt: fix UAF in pair command cancellation kernel: packet: use consistent hard_header_len in non-ring send paths kernel: mptcp: options: reset DSS fields in case of unexpected size kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir kernel: virtio-fs: avoid double-free on failed queue setup kernel: xfrm: hold net_device reference under RCU in bundle creation kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()

UBUNTU-CVE-2026-98466

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 155 more

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fix_host_ownership() walks only the linear-map alias of each memblock region, and the per-CPU hyp stack, mapped in the private VA range for its guard page, has none. Walk each stack's VA range with the same walker.