CVE-2026-99082

A flaw was found in the Linux kernel. In the KVM (Kernel-based Virtual Machine) subsystem, the per-virtual CPU (vCPU) memory-mapped I/O (MMIO) cache does not properly track active memory slots when switching between normal execution and System Management Mode (SMM). A privileged guest user can exploit this flaw by updating memory slots during SMM, leaving stale cache entries active upon returning to normal execution. This issue causes memory writes to bypass the hypervisor's write-tracking mechanism, which can result in memory corruption or a Denial of Service (DoS) on the host.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.