CVE-2026-98841Medium· 4.1▾ SunlitA flaw was found in the Linux kernel's Virtual Machine Generation ID (vmgenid) driver. The driver registers interrupt and notification handlers before fully initializing driver data during startup. If an interrupt or notification is receiv…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 22.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 20.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
Last analysed / modified upstream
— → 4.1
none → medium
A flaw was found in the Linux kernel's Virtual Machine Generation ID (vmgenid) driver. The driver registers interrupt and notification handlers before fully initializing driver data during startup. If an interrupt or notification is received immediately—such as when restoring a virtual machine from a snapshot—the handler dereferences an uninitialized pointer. This condition triggers a kernel crash, resulting in a Denial of Service (DoS) of the virtual guest system.
kernel: virt: vmgenid: set driver_data before registering notification handlers — rated Moderate by Red Hat. Released 2026-10-18, updated 2026-10-23.
Affected:
No fix planned:
Not affected:
Fix deferred
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109241Low· 3.1FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages
CVE-2026-107890Low· 3.3OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests
CVE-2026-98876Medium· 4.1kernel: host1x: bus: Fix missing ops null check in error teardown (CVE-2026-98876)
CVE-2026-98877Medium· 4.7kernel: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed (CVE-2026-98877)
CVE-2026-98875Medium· 4.4kernel: drm/nouveau/gsp: add SEC2 to GA100 chip table (CVE-2026-98875)
CVE-2026-98869High· 7.8kernel: bpf: Infer zext_dst based on static register liveness analysis (CVE-2026-98869)