CVE-2026-98470

Published: Ott 18, 2026 Last Modified: Ott 19, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode

kvm_pkvm_ioctl_allowed() WARNs when kvm_get_cap_for_kvm_ioctl() doesn't
find the ioctl number in vm_ioctl_caps[], and kvm_arch_vm_ioctl() calls
it for every number the generic code doesn't handle, so
ioctl(vm_fd, 0xdeadbeef) from userspace taints a pKVM host and panics it
under panic_on_warn. The lookup is fed userspace input: return false,
and userspace gets the -EINVAL kvm_arch_vm_ioctl() returns for that
number on a host without pKVM.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0016
Percentile
0,0th
Updated

EPSS Score Trend (Last 3 Days)

https://git.kernel.org/stable/c/49d9d295d69d07e850cae35933b…
https://git.kernel.org/stable/c/49d9d295d69d07e850cae35933ba8519e2915f26
https://git.kernel.org/stable/c/cc53eb5c6515e3221314624a22c…
https://git.kernel.org/stable/c/cc53eb5c6515e3221314624a22c9da9c80a67f63