Incorrect behavior order in Linux kernel - CVE-2026-98878

Vulnerability identifier: #VU157628

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98878

CWE-ID: CWE-696

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to cause a denial of service by blocking other incoming interrupts.

The vulnerability exists due to incorrect ordering of interrupt priority drop operations in the Linux kernel GICv5 interrupt controller driver when an interrupt remains active during a long-running process or guest VM execution. A local user can cause an interrupt to remain active during such execution to delay the priority drop and prevent other interrupts from being signalled.

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17

• https://git.kernel.org/stable/c/abf60331ebe9a9a7937a72aac7699c2907ab9307
• https://git.kernel.org/stable/c/c29bb5acd0cad0b49399d1399dd1bacb39e41438

• Incorrect behavior order in Linux kernel irqchip driver
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more