-

CVE-2026-98440

KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction

We free the shadow S2 structures from kvm_arch_flush_shadow_all(), which
is a Bad Idea(tm). Freeing the page tables is fair game (this is what
this callback is for), but freeing the container that could still be
referenced by another part of the system is not great.

Instead, grow separate destructors that gets called when we tear the VM
down for good. From there, we can nuke both the individual MMUs as well
as the global array that points to them, safe in the knowledge that the
vcpus themselves have been destroyed already.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 4f128f8e1aaac189f83d0f828bcdb2986d8d2e51
Version < 876049f026b4dfaca0cc78ec81be0e639ca8525d
Status affected
Version 4f128f8e1aaac189f83d0f828bcdb2986d8d2e51
Version < 22e82acec93a681071ed36f70eabe2d0c4e0bebd
Status affected
Version 4f128f8e1aaac189f83d0f828bcdb2986d8d2e51
Version < 5bf1c9175e657b3c2dc1cf77403031ac7aadcf66
Status affected
Version 4f128f8e1aaac189f83d0f828bcdb2986d8d2e51
Version < e5843f4effaa2ffac3e789ecd4456403564961d4
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.11
Status affected
Version 0
Version < 6.11
Status unaffected
Version <= 6.12.*
Version 6.12.113
Status unaffected
Version <= 6.18.*
Version 6.18.56
Status unaffected
Version <= 7.2.*
Version 7.2.9
Status unaffected
Version <= *
Version 7.3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.057
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/876049f026b4dfaca0cc78ec81be0e639ca8525d
https://git.kernel.org/stable/c/22e82acec93a681071ed36f70eabe2d0c4e0bebd
https://git.kernel.org/stable/c/5bf1c9175e657b3c2dc1cf77403031ac7aadcf66
https://git.kernel.org/stable/c/e5843f4effaa2ffac3e789ecd4456403564961d4