CVE-2026-98472Low· 3.3▾ SunlitA flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) AMD SEV (Secure Encrypted Virtualization) implementation. This flaw allows a local user with permissions to manage virtual machines to cause a denial of service (DoS…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 20.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
Last analysed / modified upstream
0.2%
— → 3.3
none → low
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) AMD SEV (Secure Encrypted Virtualization) implementation. This flaw allows a local user with permissions to manage virtual machines to cause a denial of service (DoS) through memory exhaustion. When an SEV guest is destroyed after undergoing an intra-host migration, the kernel fails to release allocated CPU tracking memory, resulting in an unrecoverable memory leak each time a migrated guest is terminated.
kernel: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV — rated Low by Red Hat. Released 2026-10-18, updated 2026-10-20.
Affected:
No fix planned:
Not affected:
Fix deferred
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98831Low· 2.3kernel: of/overlay: don't leak fragment references when changeset init fails (CVE-2026-98831)
CVE-2026-98433Low· 2.5kernel: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure (CVE-2026-98433)
CVE-2026-98596Medium· 5.5kernel: ipv6: Fix dst leak for uncached routes (CVE-2026-98596)
CVE-2026-116152Medium· 5.3ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoder (CVE-2026-116152)
CVE-2026-97631High· 8.8edk2: Pre-boot RCE in EDK II PXE driver (CVE-2026-97631)
CVE-2026-98869High· 7.8kernel: bpf: Infer zext_dst based on static register liveness analysis (CVE-2026-98869)