CVE-2026-43096
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
06/05/2026
Última modificación:
06/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mshv: Fix infinite fault loop on permission-denied GPA intercepts<br />
<br />
Prevent infinite fault loops when guests access memory regions without<br />
proper permissions. Currently, mshv_handle_gpa_intercept() attempts to<br />
remap pages for all faults on movable memory regions, regardless of<br />
whether the access type is permitted. When a guest writes to a read-only<br />
region, the remap succeeds but the region remains read-only, causing<br />
immediate re-fault and spinning the vCPU indefinitely.<br />
<br />
Validate intercept access type against region permissions before<br />
attempting remaps. Reject writes to non-writable regions and executes to<br />
non-executable regions early, returning false to let the VMM handle the<br />
intercept appropriately.<br />
<br />
This also closes a potential DoS vector where malicious guests could<br />
intentionally trigger these fault loops to consume host resources.



