CVE-2026-98472
Vulnérabilité non évaluée dans Linux (Linux)
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV Unconditionally free SEV's "have run CPUs" cpumask in the VM destroy path, i.e. even for what appear to be non-SEV VMs, as an SEV VM becomes a non-SEV VM if its state is intra-host migrated. Alternatively, the mask could be freed in sev_migrate_from() when "converting" the source VM, but that gets annoying because ideally KVM would nullify the mask to guard against UAF, and nullifying the mask would need be conditioned on CPUMASK_OFFSTACK=y. Freeing the mask during sev_migrate_from() is also not robust against other KVM bugs, though that's kind of a moot point since any such bugs would show up even if sev->active is never set. I.e. KVM must get that side of things correct. But, that's not a great reason to add more code just to make things marginally less robust.
Gravité et risque d'exploitation
CVE-2026-98472 obtient un score CVSS de 0.0/10, soit une gravité non évaluée.
Que faire ?
- Vérifiez si Linux (versions <9784e5ca91b37b387f3f414af4340c54f7a63566, <=*, <12c1f6e03f944e399bd2c88441dca5dc702b95a5, <=7.2.*, <=6.18.*, 7.2.9, 6.18.55, 6.17, 0, <6.17, 6f38f8c574642a822f2e85f079fa29a49176c49c, <6aef7cf800098749ff5d660222efaf6e01e98c09, 7.3) est présent sur votre parc.
- Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
- À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
- Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.