PT-2026-29484 · Linux+1 · Linux Kernel+1

Published 2026-04-01 · Updated 2026-05-26 · CVE-2026-23401

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc2-eafebd2d2ab0-sink-vm #319

Description A flaw was discovered in the Linux kernel's KVM component related to the handling of shadow-present SPTEs (Stale Page Table Entries) during the installation of emulated MMIO (Memory Mapped I/O) SPTEs. Specifically, the vulnerability occurs when an MMIO SPTE is installed without first dropping or zapping the existing shadow-present SPTE. This can lead to issues when host userspace modifies a shadowed gPTE to switch from a memslot to emulated MMIO, and the guest subsequently triggers a relevant page fault. The issue was identified during testing and is triggered by writes to guest memory outside the scope of KVM.

Recommendations Update the Linux kernel to a version newer than 7.0.0-rc2-eafebd2d2ab0-sink-vm #319.

Fix

Related Identifiers

ALSA-2026:13577

ALSA-2026:13578

ALSA-2026:19568

ALSA-2026:19569

CVE-2026-23401

ECHO-2CB8-E715-E73B

OESA-2026-1861

OESA-2026-1862

OESA-2026-1863

OESA-2026-1864

RHSA-2026:13577

RHSA-2026:13578

RHSA-2026:13932

RHSA-2026:13936

RHSA-2026:14137

RHSA-2026:14230

RHSA-2026:14339

RHSA-2026:15883

RHSA-2026:19521

RHSA-2026:19568

RHSA-2026:19569

RHSA-2026:19875

RHSA-2026:20593

Affected Products

Linux Kernel

Rocky Linux

References · 145

• https://nvd.nist.gov/vuln/detail/CVE-2026-23409 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-23401 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23394 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1864 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23310 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23403 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23401 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23365 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23290 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23362 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23413 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23391 · Security Note
• https://git.kernel.org/stable/c/20656cd1f243d3a154aac5dd1b823110b6906fe1 · Patch
• https://errata.almalinux.org/9/ALSA-2026-19568.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-50170.html · Vendor Advisory