SB20260928221 - Race condition in Linux kernel vhost driver

Description

This security bulletin contains information about 1 vulnerability.

1) Race condition (CVE-ID: CVE-2026-97988)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 0 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause stale ring mappings to be used.

The vulnerability exists due to improper synchronization of cached vring pointers and IOTLB metadata in vhost IOTLB handling when transitioning VIRTIO_F_ACCESS_PLATFORM. A local user can transition VIRTIO_F_ACCESS_PLATFORM settings to cause stale ring mappings to be used.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/4a454af8e56c1596ada1421ae5eba90c8896c7c7
• https://git.kernel.org/stable/c/e4f4761879a230aa59e569102a6ab9851847d833