SB20261022459 - NULL pointer dereference in Linux kernel virt driver

Description

This security bulletin contains information about 1 vulnerability.

1) NULL pointer dereference (CVE-ID: CVE-2026-98841)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service by triggering a guest kernel panic.

The vulnerability exists due to a NULL pointer dereference in the Linux kernel VM Generation ID driver when a notification handler runs before driver_data is assigned during device probing. A local user can trigger a generation-change notification or a shared-line interrupt during this initialization window to cause a kernel panic, provided they can influence the relevant notification or interrupt source.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/538fe5efaa9704ad820ba34b4f9df135ca873d79
• https://git.kernel.org/stable/c/7a1e8daeaa466c6aaffa223e1afe9cfeece0dd47
• https://git.kernel.org/stable/c/8f42954ad8bf9bdbf574f2c437ad30cb2601f401
• https://git.kernel.org/stable/c/9f8139c6145cf17d690d6c414d43b4c0bef632fb