CVE-2026-98464

A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) implementation for the RISC-V architecture. This vulnerability can lead to a Denial of Service (DoS) or host system crash due to a use-after-free memory issue during virtual machine teardown. A race condition allows a timer callback to continue executing after its associated virtual central processing unit (vCPU) has already been freed. A malicious user within a guest virtual machine can exploit this by scheduling a timer and immediately requesting a system shutdown.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.