CVE-2026-98467 | Linux Kernel up to 6.18.54/7.2.8/7.3-rc4 KVM kvm_nested_s2_unmap/kvm_nested_s2_wp null pointer dereference

October 18, 2026 Yanac

A vulnerability was found in Linux Kernel up to 6.18.54/7.2.8/7.3-rc4 and classified as very critical. This issue affects the function kvm_nested_s2_unmap/kvm_nested_s2_wp of the component KVM. The manipulation results in null pointer dereference.

This vulnerability was named CVE-2026-98467. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More