Riskcovery

CVE-2026-99177

KVM: SEV: Fix page dirtying in sev_gmem_post_populate()

State
Published
Severity
Not scored
Published
Oct 28, 2026
Updated
Oct 28, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: SEV: Fix page dirtying in sev_gmem_post_populate()

set_page_dirty() requires that the caller holds some kind of lock to ensure that the page's mapping does not concurrently go away. That is not the case for a random page we got from get_user_pages_fast(), so use set_page_dirty_lock().

[sean: tag for stable]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 97cd21d57e9bd2da79845178d9250cfd19289cd4 to before 184382f9852d433af21de96c334ecf43b8414ed8Affected
  • 97cd21d57e9bd2da79845178d9250cfd19289cd4 to before 97818b2fa7082e940ddd36dab12a68615300e798Affected
LinuxLinux
  • 7.2Affected
  • before 7.2Not affected
  • 7.2.13 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.