CVE-2026-99177 — Vulnerability intelligence
—
Published:
- CVSS
- 7.8
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: Fix page dirtying in sev_gmem_post_populate()
set_page_dirty() requires that the caller holds some kind of lock to
ensure that the page's mapping does not concurrently go away.
That is not the case for a random page we got from get_user_pages_fast(),
so use set_page_dirty_lock().
[sean: tag for stable]