Linux Kernel Vulnerability in KVM Affecting x86 Architecture

CVE-2026-99082

What is CVE-2026-99082?

A flaw exists in the Linux kernel's KVM module affecting x86 architecture where an update to SMM memslots may result in stale information being used in the per-vCPU MMIO cache. This vulnerability can lead to memory access to invalid RAM being returned to userspace. The problem arises because the active memslots are not utilized for cache validation, enabling potential exploitation when transitioning between different address spaces. Developers have identified and fixed this issue by ensuring that active memslots are used for caching and validation processes, thus preventing stale entries and enhancing memory protection.

References