CVE-2026-98466 KVM: arm64: Transfer the hyp stack pages out of the host stage-2
A flaw in Linux kernel KVM arm64 allows local attackers to escalate privileges by exploiting improper hypervisor stack page ownership handling.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-98466?
CVE-2026-98466 is a high-severity vulnerability in Linux, published on 18 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Transfer the hyp stack pages out of the host stage-2
fix_host_ownership() walks only the linear-map alias of each memblock region, and the per-CPU hyp stack, mapped in the private VA range for its guard page, has none.
Walk each stack's VA range with the same walker.
Which versions are affected by CVE-2026-98466?
How do I fix CVE-2026-98466?
Apply the vendor's patch.
Is CVE-2026-98466 being exploited?
There is no known exploitation of CVE-2026-98466 in the wild and no public exploit code.
Sources
Also known as AZL-108924, BELL-CVE-2026-98466, DEBIAN-CVE-2026-98466, GHSA-7374-3pfm-f9q8, UBUNTU-CVE-2026-98466.