SB20261022319 - Improper handling of exceptional conditions in Linux kernel kvm svm

Description

This security bulletin contains information about 1 vulnerability.

1) Improper handling of exceptional conditions (CVE-ID: CVE-2026-98714)

CWE-ID: CWE-755 - Improper Handling of Exceptional Conditions

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause incorrect virtual machine control-state handling, potentially disrupting subsequent guest execution.

The vulnerability exists due to improper handling of exceptional conditions in the Linux kernel KVM SVM svm_vcpu_run() function when a VMRUN instruction fails. A local user can exercise virtual machine execution paths that encounter this failure to cause control fields to be cleared or marked clean even though the processor may not have performed the requested operations.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/8676b29d186fcb5c1251d8152fc91d19421e5600
• https://git.kernel.org/stable/c/e27fc915c8f575ab5630e27d97465c2077d4b9d1