CVE-2026-98164

A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem. When virtualized System Management Mode (SMM) is enabled, memory write tracking only checks the active memory slot rather than all address spaces sharing shadow pages. An attacker inside a guest virtual machine can exploit this flaw to induce memory tracking inconsistencies, triggering an internal kernel crash and causing a Denial of Service (DoS) on the host system.

Last checked: 2026-09-30 15:05 UTC

References

• NVD: CVE-2026-98164
• Upstream Advisory

Fix Status by Distribution

Fix evidence last checked: 2026-09-29 21:20 UTC