CVE-2026-98156

A flaw was found in the Linux kernel. This vulnerability can lead to information disclosure when running a Xen paravirtualized (PV) guest. The virtio graphics driver (virtio-gpu) fails to use the Direct Memory Access (DMA) interface to translate memory addresses for the display framebuffer, passing raw physical addresses to the host. A local user in the guest domain can exploit this issue to cause the host to display unrelated memory belonging to the host or other virtual machines.

A Xen PV guest using virtio GPU can provide guest physical addresses as resource backing when DMA mapping is required. The host may interpret these addresses as machine addresses belonging to another Xen domain and can scan out unrelated memory. This can violate Xen domain isolation and may expose data from other domains through the graphics resource path. For the CVSS the PR:L is selected because an attacker needs local code execution in the affected Xen PV guest and access to the virtio GPU DRM interface. The issue is not directly network reachable. AC:H is selected because exploitation requires the specific Xen PV and virtio GPU configuration where guest physical addresses are not identity mapped. Impact is confirmed as cross domain information exposure. Integrity impact is not established by the patch context.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.