CVE-2026-98716

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted

Use the MSR permission bitmap of the active VMCB instead of assuming that

KVM is always using vmcb02's bitmap when L2 is active, as KVM uses msrpm02

if and only if L1 wants to intercept MSR accesses, i.e. if and only if KVM

needs to merge msprm01 with msrpm12.

Don't bother tracking the virtual address of the bitmap that's being used,

as __va() is cheap on x86, and caching the virtual address would introduce

yet another source of potentially stale information.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References