{"id":"CVE-2026-99177","title":"KVM: SEV: Fix page dirtying in sev_gmem_post_populate()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SEV: Fix page dirtying in sev_gmem_post_populate()\n\nset_page_dirty() requires that the caller holds some kind of lock to\nensure that the page's mapping does not co…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 97cd21d57e9bd2da79845178d9250cfd19289cd4 < 184382f9852d433af21de96c334ecf43b8414ed8","Linux >= 97cd21d57e9bd2da79845178d9250cfd19289cd4 < 97818b2fa7082e940ddd36dab12a68615300e798","Linux 7.2"],"published":"2026-10-28","updated":"2026-10-28","sourceUpdated":"2026-10-28T10:35:31.315Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99177","references":[{"url":"https://git.kernel.org/stable/c/184382f9852d433af21de96c334ecf43b8414ed8"},{"url":"https://git.kernel.org/stable/c/97818b2fa7082e940ddd36dab12a68615300e798"}],"tags":["cve.org"],"ingestedAt":"2026-10-28T11:09:40.385Z","slug":"CVE-2026-99177","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SEV: Fix page dirtying in sev_gmem_post_populate()\n\nset_page_dirty() requires that the caller holds some kind of lock to\nensure that the page's mapping does not concurrently go away.\nThat is not the case for a random page we got from get_user_pages_fast(),\nso use set_page_dirty_lock().\n\n[sean: tag for stable]\n\n## Affected\n\n- `Linux >= 97cd21d57e9bd2da79845178d9250cfd19289cd4 < 184382f9852d433af21de96c334ecf43b8414ed8`\n- `Linux >= 97cd21d57e9bd2da79845178d9250cfd19289cd4 < 97818b2fa7082e940ddd36dab12a68615300e798`\n- `Linux 7.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}