CVE-2026-98720

A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) nested virtualization implementation. This flaw allows an attacker within a nested guest to bypass isolation boundaries and directly access host hardware controls, potentially causing host system instability or a Denial of Service (DoS). The issue occurs when nested virtualization control settings are modified without refreshing internal register permissions, leaving the host's Task Priority Register (TPR) directly accessible to the guest.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.