CVE-2026-99168

In the Linux kernel, the following vulnerability has been resolved: mshv_vtl: Check per-CPU register page before mmap Register-page setup is optional for each CPU. If allocation or registration fails, mshv_vtl_configure_reg_page() warns and leaves that CPU's reg_page NULL, but initial context setup continues successfully. Meanwhile, successful setup on another CPU sets the global mshv_has_reg_page flag. mshv_vtl_fault() checks this global flag before selecting the requested CPU's register page. With mixed setup results across online CPUs, the check passes even for a CPU with no register page, reaching get_page(NULL) when userspace faults in that mapping. Check the selected per-CPU register page before taking its reference and return VM_FAULT_SIGBUS if it is absent.

• https://git.kernel.org/stable/c/5c0757b065fbd140d8fbd05dc2c2146b713dfa68
• https://git.kernel.org/stable/c/874194a8de75fc2f4d1fb70c670b289b7e48f93e

Published

Oct 28, 2026

Last Modified

Oct 28, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-99162In the Linux kernel, the following vulnerability has been re…
• CVE-2026-99163In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-99164In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-99165In the Linux kernel, the following vulnerability has been re…
• CVE-2026-99166In the Linux kernel, the following vulnerability has been re…
• CVE-2026-99167In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-99169In the Linux kernel, the following vulnerability has been re…
• CVE-2026-9917Uninitialized Use in WebGL in Google Chrome on Android prior…6.5
• CVE-2026-99170In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-99171In the Linux kernel, the following vulnerability has been re…
• CVE-2026-99172In the Linux kernel, the following vulnerability has been re…
• CVE-2026-99173In the Linux kernel, the following vulnerability has been re…7.8