Riskcovery

CVE-2026-99168

mshv_vtl: Check per-CPU register page before mmap

State
Published
Severity
Not scored
Published
Oct 28, 2026
Updated
Oct 28, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mshv_vtl: Check per-CPU register page before mmap

Register-page setup is optional for each CPU. If allocation or registration fails, mshv_vtl_configure_reg_page() warns and leaves that CPU's reg_page NULL, but initial context setup continues successfully. Meanwhile, successful setup on another CPU sets the global mshv_has_reg_page flag.

mshv_vtl_fault() checks this global flag before selecting the requested CPU's register page. With mixed setup results across online CPUs, the check passes even for a CPU with no register page, reaching get_page(NULL) when userspace faults in that mapping.

Check the selected per-CPU register page before taking its reference and return VM_FAULT_SIGBUS if it is absent.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7bfe3b8ea6e30437e01fcb8e4f56ef6e4d986d0f to before 5c0757b065fbd140d8fbd05dc2c2146b713dfa68Affected
  • 7bfe3b8ea6e30437e01fcb8e4f56ef6e4d986d0f to before 874194a8de75fc2f4d1fb70c670b289b7e48f93eAffected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 7.2.13 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.