CVE-2026-52969

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An integer overflow exists in the kvm reset dirty gfn() function within the Kernel-based Virtual Machine (KVM) component. A local attacker with access to /dev/kvm can manipulate dirty ring entries to cause a u64 wrap during an unchecked addition. This allows the attacker to bypass a bounds check, leading to an out-of-bounds load of a kvm rmap head and a subsequent conditional clear of PT WRITABLE MASK in the memory location pointed to by the loaded pointer. This flaw can result in information disclosure or a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.