CVE-2026-98465

A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) subsystem for the RISC-V architecture. Due to missing synchronization between interrupt controller device operations and virtual CPU (vCPU) execution, a local user with access to the KVM interface can trigger a race condition during concurrent processor migration. This flaw allows attribute read or write operations to target stale interrupt files, potentially leading to unauthorized data disclosure or modification of another virtual processor's interrupt state.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.