CVE-2026-98164

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvm_gfn_is_write_tracked() checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can therefore be write-tracked in one address space and appear untracked through the other. Check the supplied slot first, then the slot for the other address space. This ensures all callers honor write tracking regardless of the active address space. In particular, it prevents mmu_try_to_unsync_pages() from marking an upper-level shadow page unsync and eventually triggering the BUG in pte_list_remove(). [invert direction of the conditional. - Paolo]

• CWE-670

• https://git.kernel.org/stable/c/09aa68552d2542cc6c23edd1568ac265dc5d886fPatch
• https://git.kernel.org/stable/c/0f38453cdb2e17566ccb7c0f3dabd5bd21caca26Patch
• https://git.kernel.org/stable/c/429b6f43b4d8c98988fdca99e02dc156134e3d77Patch
• https://git.kernel.org/stable/c/c0a9bd5fca0b5f2dea32b0fc31350e71e8648112Patch
• https://git.kernel.org/stable/c/d8636c8f9f95d0fd1e2f6f1cad0d5757aa6f212aPatch
• https://git.kernel.org/stable/c/ec8fcaf354c1cbb36755d48e9f5a00c9591349e5Patch

Published

Sep 29, 2026

Last Modified

Oct 7, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-98159In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-9816Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 1…8.3
• CVE-2026-98160In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-98161In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-98162In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-98163In the Linux kernel, the following vulnerability has been re…7
• CVE-2026-98165Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-98166In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-98167In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98168In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98169In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-9817A stack-based buffer overflow vulnerability exists in the bo…9.1