SB2026102240 - Reachable assertion in Linux kernel include asm

Description

This security bulletin contains information about 1 vulnerability.

1) Reachable assertion (CVE-ID: CVE-2026-98470)

CWE-ID: CWE-617 - Reachable Assertion

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service on a protected KVM host when panic_on_warn is enabled.

The vulnerability exists due to a reachable warning assertion in kvm_pkvm_ioctl_allowed() when handling an unknown VM ioctl in protected mode. A local user can issue ioctl(vm_fd, 0xdeadbeef) using a VM file descriptor to trigger a kernel warning that taints the host and causes a kernel panic when panic_on_warn is enabled.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/49d9d295d69d07e850cae35933ba8519e2915f26
• https://git.kernel.org/stable/c/cc53eb5c6515e3221314624a22c9da9c80a67f63