CVE-2026-98164

mediumpriority · track · 22EPSS 0.001 · 4 %ileDEFRUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.15% (4th) EPSS

CVSS 5.5 · medium

Is it mine?

14 products

Check your exposure

Who says so?

3 sources

cert_bund · nvd · certfr

EPSS · scored 2026-10-22

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvm_gfn_is_write_tracked() checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can therefore be write-tracked in one address space and appear untracked through the other. Check the supplied slot first, then the slot for the other address space. This ensures all callers honor write tracking regardless of the active address space. In particular, it prevents mmu_try_to_unsync_pages() from marking an upper-level shadow page unsync and eventually triggering the BUG in pte_list_remove(). [invert direction of the conditional. - Paolo]

cvss

Technical severity, 0–10. One row per scoring source.

7.1

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.1–7.1

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 3.6

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Hsecondaryexploitability 1.8 · impact 5.2

v3.15.1mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-670USprimary

affected products (14)

Products and version ranges known to be affected.

Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
Open Source Linux Kernel< 6.1.187cert_bundDE
Open Source Linux Kernel< 6.12.108cert_bundDE
Open Source Linux Kernel< 6.18.49cert_bundDE
Open Source Linux Kernel< 6.6.156cert_bundDE
Open Source Linux Kernel< 7.1.13cert_bundDE
Open Source Linux Kernel< 7.2cert_bundDE
linux linux kernel4.2 → 6.1.187nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel6.13 → 6.18.49nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel6.19 → 7.1.13nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel6.2 → 6.6.156nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel6.7 → 6.12.108nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel= 7.2nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

advisories (2)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-3657Linux Kernel: Schwachstelle ermöglicht Denial of ServiceDeutsch2026-09-29csaf · cert_bundDE
Ein Angreifer kann eine Schwachstelle in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.
CERTFR-2026-AVI-1335Multiples vulnérabilités dans le noyau Linux de SUSEFrançais2026-10-16vendor · certfrFR

sources

Which sources assert this record, and when.

cert_bund nvd certfr NVD CVE.org MITRE

published 2026-09-29modified 2026-10-07

related (544)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2024-32896US	high7.8OT critical	2.99% (87th)	KEV	2024-06-13
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti…
CVE-2020-28052US	high8.1	7.22% (94th)	Exploit	2020-12-18
An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, all…
CVE-2023-0400US	high8.2	0.42% (35th)	Exploit	2023-02-02
The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local user to bypass DLP controls when uploading sensitive data from…
CVE-2026-35414US	high8.1	0.24% (15th)	Exploit	2026-04-02
OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certai…
CVE-2026-38361US	high7.5	2.78% (86th)	Exploit	2026-05-08
Multiple unauthenticated denial-of-service (DoS) issues in fohrloop dash-uploader v0.1.0 through v0.7.0a2. The chunked-upload handler (dash_uploader/httprequesthandler.py, dash_upl…

+539 more

references (6) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan