CVE-2026-43096
Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
06/05/2026
Última modificación:
19/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mshv: Fix infinite fault loop on permission-denied GPA intercepts<br />
<br />
Prevent infinite fault loops when guests access memory regions without<br />
proper permissions. Currently, mshv_handle_gpa_intercept() attempts to<br />
remap pages for all faults on movable memory regions, regardless of<br />
whether the access type is permitted. When a guest writes to a read-only<br />
region, the remap succeeds but the region remains read-only, causing<br />
immediate re-fault and spinning the vCPU indefinitely.<br />
<br />
Validate intercept access type against region permissions before<br />
attempting remaps. Reject writes to non-writable regions and executes to<br />
non-executable regions early, returning false to let the VMM handle the<br />
intercept appropriately.<br />
<br />
This also closes a potential DoS vector where malicious guests could<br />
intentionally trigger these fault loops to consume host resources.
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (incluyendo) | 6.19.14 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página



