CVE Explorer

CVE-2026-23198

In the Linux kernel, the following vulnerability has been resolved: KVM: Don't clobber irqfd routing type when deassigning irqfd When deassigning a KVM_IRQFD, don't clobber the irqfd's copy of the IRQ's routing entry as doing so breaks kvm_arch_irq_bypass_del_producer() on x86 and arm64, which explicitly look for KVM_IRQ_ROUTING_MSI. Instead, to handle a concurrent routing update, verify that the irqfd is still active before consuming the routing information. As evidenced by the x86 and arm6

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:74bac9c652f6e9c4960c82460545e5c719e52112493437bf6cc710b4836cd2d7

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["virt/kvm/eventfd.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"959a063e7f12524bc1871ad1f519787967bbcd45","status":"affected","version":"f70c20aaf141adb715a2d750c55154073b02a9c3","versionType":"git"},{"lessThan":"2284bc168b148a17b5ca3b37b3d95c411f18a08d","status":"affected","version":"f70c20aaf141adb715a2d750c55154073b02a9c3","versionType":"git"},{"lessThan":"6d14ba1e144e796b5fc81044f08cfba9024ca195","status":"affected","version":"f70c20aaf141adb715a2d750c55…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:cab35593cde4f29998957e33a9614335c5fc9d98fd78e775b424e1e8b7b0b98e · sha256:7a313a778d1f5d68… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["virt/kvm/eventfd.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.4"},{"lessThan":"4.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.250","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.200","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.163","versionType":"semver"},{"lessThanOrEq…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:cab35593cde4f29998957e33a9614335c5fc9d98fd78e775b424e1e8b7b0b98e · sha256:7a313a778d1f5d68… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:cab35593cde4f29998957e33a9614335c5fc9d98fd78e775b424e1e8b7b0b98e · sha256:7a313a778d1f5d68… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:cab35593cde4f29998957e33a9614335c5fc9d98fd78e775b424e1e8b7b0b98e · sha256:7a313a778d1f5d68… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:cab35593cde4f29998957e33a9614335c5fc9d98fd78e775b424e1e8b7b0b98e · sha256:7a313a778d1f5d68… · /containers/cna/metrics/0/cvssV3_1

Source references

7 source assertions

{"url":"https://git.kernel.org/stable/c/2284bc168b148a17b5ca3b37b3d95c411f18a08d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:cab35593cde4f29998957e33a9614335c5fc9d98fd78e775b424e1e8b7b0b98e · sha256:7a313a778d1f5d68… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/4385b2f2843549bfb932e0dcf76bf4b065543a3c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:cab35593cde4f29998957e33a9614335c5fc9d98fd78e775b424e1e8b7b0b98e · sha256:7a313a778d1f5d68… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/6d14ba1e144e796b5fc81044f08cfba9024ca195"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:cab35593cde4f29998957e33a9614335c5fc9d98fd78e775b424e1e8b7b0b98e · sha256:7a313a778d1f5d68… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/959a063e7f12524bc1871ad1f519787967bbcd45"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:cab35593cde4f29998957e33a9614335c5fc9d98fd78e775b424e1e8b7b0b98e · sha256:7a313a778d1f5d68… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/b4d37cdb77a0015f51fee083598fa227cc07aaf1"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:cab35593cde4f29998957e33a9614335c5fc9d98fd78e775b424e1e8b7b0b98e · sha256:7a313a778d1f5d68… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/b61f9b2fcf181451d0a319889478cc53c001123e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:cab35593cde4f29998957e33a9614335c5fc9d98fd78e775b424e1e8b7b0b98e · sha256:7a313a778d1f5d68… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/ff48c9312d042bfbe826ca675e98acc6c623211c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:cab35593cde4f29998957e33a9614335c5fc9d98fd78e775b424e1e8b7b0b98e · sha256:7a313a778d1f5d68… · /containers/cna/references/4

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer