Use-After-Free Vulnerability in Linux Kernel Affecting KVM Modules

CVE-2026-68428

What is CVE-2026-68428?

A vulnerability in the Linux kernel affects KVM modules, specifically concerning a use-after-free condition. This flaw occurs because, when certain caches are destroyed, the pointers to these caches remain unchanged, leading to potential access of freed memory. When a vendor module is unloaded while the main KVM module remains active, any subsequent failure in cache creation can lead to stale pointer errors. The issue arises when the stale pointer, pointing to a destroyed cache, is passed to systematic memory management functions, triggering a slab use-after-free condition. With the proper fix, the vulnerability can be mitigated, preventing attackers from exploiting this fault during module reloads.

References