Linux Kernel KVM SEV Page-Dirtying Fix via set_page_dirty_lock()
CVE-2026-99177 Published on October 28, 2026
KVM: SEV: Fix page dirtying in sev_gmem_post_populate()
In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: Fix page dirtying in sev_gmem_post_populate()
set_page_dirty() requires that the caller holds some kind of lock to
ensure that the page's mapping does not concurrently go away.
That is not the case for a random page we got from get_user_pages_fast(),
so use set_page_dirty_lock().
[sean: tag for stable]
Products Associated with CVE-2026-99177
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 97cd21d57e9bd2da79845178d9250cfd19289cd4 and below 184382f9852d433af21de96c334ecf43b8414ed8 is affected.
- Version 97cd21d57e9bd2da79845178d9250cfd19289cd4 and below 97818b2fa7082e940ddd36dab12a68615300e798 is affected.
- Version 7.2 is affected.
- Before 7.2 is unaffected.
- Version 7.2.13, <= 7.2.* is unaffected.
- Version 7.3, <= * is unaffected.