CVE-2026-98716

CVE-2026-98716

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
5.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted

Use the MSR permission bitmap of the active VMCB instead of assuming that

KVM is always using vmcb02's bitmap when L2 is active, as KVM uses msrpm02

if and only if L1 wants to intercept MSR accesses, i.e. if and only if KVM

needs to merge msprm01 with msrpm12.

Don't bother tracking the virtual address of the bitmap that's being used,

as __va() is cheap on x86, and caching the virtual address would introduce

yet another source of potentially stale information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.7th percentile
Published
2026-10-18T20:17Z
References (5)
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:46Z
    KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted
    cvelistv5
  • 18 OCT 15:46Z
    KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted
    cvelistv5