{"id":"CVE-2026-99168","revision":"fc90a5c47f684dc3ae19300a8a5b22c6","records":[{"revision":"fc90a5c47f684dc3ae19300a8a5b22c6","observedAt":"2026-10-28T11:27:43.363+00:00","statement":{"source":"cve-program","id":"CVE-2026-99168","aliases":[],"title":"mshv_vtl: Check per-CPU register page before mmap","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmshv_vtl: Check per-CPU register page before mmap\n\nRegister-page setup is optional for each CPU. If allocation or\nregistration fails, mshv_vtl_configure_reg_page() warns and leaves that\nCPU's reg_page NULL, but initial context setup continues successfully.\nMeanwhile, successful setup on another CPU sets the global\nmshv_has_reg_page flag.\n\nmshv_vtl_fault() checks this global flag before selecting the requested\nCPU's register page. With mixed setup results across online CPUs, the\ncheck passes even for a CPU with no register page, reaching\nget_page(NULL) when userspace faults in that mapping.\n\nCheck the selected per-CPU register page before taking its reference and\nreturn VM_FAULT_SIGBUS if it is absent.","state":0,"publishedAt":"2026-10-28T10:35:19.539+00:00","modifiedAt":"2026-10-28T10:35:19.539+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/hv/mshv_vtl_main.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"7bfe3b8ea6e30437e01fcb8e4f56ef6e4d986d0f\",\n                            \"lessThan\": \"5c0757b065fbd140d8fbd05dc2c2146b713dfa68\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7bfe3b8ea6e30437e01fcb8e4f56ef6e4d986d0f\",\n                            \"lessThan\": \"874194a8de75fc2f4d1fb70c670b289b7e48f93e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/hv/mshv_vtl_main.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.19\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.19\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.13\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/5c0757b065fbd140d8fbd05dc2c2146b713dfa68","https://git.kernel.org/stable/c/874194a8de75fc2f4d1fb70c670b289b7e48f93e"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99168","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-99168","identifiers":["CVE-2026-99168"]},"retained":false,"historicalAffected":[]}],"coverage":[]}