CVE-2026-98466

CVSS 8.2 (high) · published 2026-10-18

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fix_host_ownership() walks only the linear-map alias of each memblock region, and the per-CPU hyp stack, mapped in the private VA range for its guard page, has none. Walk each stack's VA range with the same walker.

Source: NVD CVE-2026-98466

References

• https://git.kernel.org/stable/c/22df195bff84300a3f04813d6148765c77ac565a
• https://git.kernel.org/stable/c/3a8c562892b96f35bba1e00d5e455a15963bbb92
• https://git.kernel.org/stable/c/6c7b5eb6f7f424f5b82d0f9469a5f5adcdf4d973
• https://git.kernel.org/stable/c/e5dd2a91a7ae3a276e6d79806127e923936e241b

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.