KVM Vulnerability in Linux Kernel Affecting Page Dirtying Functionality

CVE-2026-99177

What is CVE-2026-99177?

A vulnerability within the Linux kernel KVM component has been identified involving improper handling of page dirtying during the SEV process. The function responsible for marking pages as dirty, set_page_dirty(), requires that a lock be held by the caller to prevent concurrent modifications. However, this was not enforced when utilizing get_user_pages_fast(), leading to potential inconsistencies and integrity issues in the memory mapping of the affected pages. A remedy has been implemented to utilize set_page_dirty_lock() instead, ensuring appropriate lock management and enhancing system security.

References