CVE-2026-98156: linux kernel from 4.20 (inclusive), before 6.18.53 (exclusive), from 6.19 (inclusive), before 7.2.7 (exclusive), 7.3 ·…

Affected technology

linux kernel · from 4.20 (inclusive), before 6.18.53 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.2.7 (exclusive)
linux

linux kernel · 7.3 · update rc1
linux

Linux · a3b815f09bb846255c458c181b8a5b1cc66891b4 to before 93c557e947ef0040004b1ac6a1c1265d79a957e1, a3b815f09bb846255c458c181b8a5b1cc66891b4 to before 455184dbe9652d01470d3c5cf5edd09a7a673a99, a3b815f09bb846255c458c181b8a5b1cc66891b4 to before 6a736d2f9d0c6e6217fe7532bc4c50ceca71db78
Linux

Linux · 4.20
Linux

Component: Not specified by the source
File: drivers/gpu/drm/virtio/virtgpu_drv.h, drivers/gpu/drm/virtio/virtgpu_object.c, drivers/gpu/drm/virtio/virtgpu_vq.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.