CVE-2026-98470Medium· 4.7▾ SunlitA flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem for ARM64. This vulnerability allows a local attacker to cause a Denial of Service (DoS). When running in protected mode, the kernel issues an internal war…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 20.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
Last analysed / modified upstream
0.2%
— → 4.7
none → medium
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem for ARM64. This vulnerability allows a local attacker to cause a Denial of Service (DoS). When running in protected mode, the kernel issues an internal warning upon receiving an unknown virtual machine I/O control (IOCTL) command from userspace. On hosts configured to panic on kernel warnings, this causes the host operating system to crash.
kernel: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode — rated Moderate by Red Hat. Released 2026-10-18, updated 2026-10-20.
Affected:
No fix planned:
Not affected:
Fix deferred
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-101612Medium· 4.0mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101612)
CVE-2026-101618Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101618)
CVE-2026-101619Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101619)
CVE-2026-101621Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101621)
CVE-2026-101727Medium· 4.9mysql: mysql: Denial of Service via the Replication component (CVE-2026-101727)
CVE-2026-101780Medium· 6.5mysql: mysql: Denial of Service via X Plugin (CVE-2026-101780)