Answer in brief
CVE-2026-98720 records a Unknown severity vulnerability in KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=502d2bf5f2fd7c05adc2d4f057910bd5d4c4c63e <2db11598b59f16ddb6420693f9a4ac4efc3d4789 || >=502d2bf5f2fd7c05adc2d4f057910bd5d4c4c63e <f6189e26d0237e47e2f04f9cb1e43fd19a9b2f3a || >=502d2bf5f2fd7c05adc2d4f057910bd5d4c4c63e <1e497e3bdab6983deb68a1d26b488027deb4527f || >=502d2bf5f2fd7c05adc2d4f057910bd5d4c4c63e <2abb25273c82061dd4670690c81c319c03740bf6 | 2db11598b59f16ddb6420693f9a4ac4efc3d4789, f6189e26d0237e47e2f04f9cb1e43fd19a9b2f3a, 1e497e3bdab6983deb68a1d26b488027deb4527f, 2abb25273c82061dd4670690c81c319c03740bf6 |
| Linux/Linuxgeneric | 5.17 | Not reported |
Published upstream
Oct 18, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 18, 2026
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified Force a refresh of the vmcs02 MSR bitmap during nested VM-Enter if the runtime eVMCS controls (pin, primary, secondary, etc.) are being updated. If L1 isn't intercepting TPR writes, runs L2 with TPR virtualization, and then runs the same L2 with TPR virtualization disabled, KVM will fail to refresh msr_bitmap02 and leave TPR in passthrough mode even though TPR virtualization is disabled. I.e. failure to refresh the bitmap lets L2 (or L1 by proxy) read and write L0's TPR.
Quoted source text, attributed separately from HOL analysis.