AZL-108225 CVE-2026-98156 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

DEBIAN-CVE-2026-98156

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

CVE-2026-98156

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

UBUNTU-CVE-2026-98156

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

CVE-2026-98156 drm/virtio: use the DMA API for resource backing on Xen

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

CVE-2026-98156 drm/virtio: use the DMA API for resource backing on Xen

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

EUVD-2026-86987

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

CVE-2026-98156

The Linux kernel contains a vulnerability in the drm/virtio component when running on Xen . The root cause is that virtio-gpu independently determines whether to use the DMA API based solely on a feature bit. Because QEMU does not set iommu_platform on virtio-vga by default, the system fails to n...

kernel: drm/virtio: use uninterruptible resv lock for plane updates

A flaw was found in the Linux kernel's VirtIO GPU Graphics Processing Unit driver. The virtiogpucursorplaneupdate and virtiogpuresourceflush functions fail to properly acquire a required lock, which can lead to a race condition. A local user could exploit this vulnerability by triggering a memory...

CVE-2026-98156

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

CVE-2026-98156: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

CVE-2026-98156: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

Linux Distros Unpatched Vulnerability : CVE-2026-98156

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to...

PT-2026-98818

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.8 and 6.18 LTS Description An issue exists in the drm/virtio component where the virtio-gpu driver fails to correctly use the DMA API for resource backing on Xen PV domains. In these domains, page addresses do not...

kernel: drm/virtio: use uninterruptible resv lock for plane updates

A flaw was found in the Linux kernel's VirtIO GPU Graphics Processing Unit driver. The virtiogpucursorplaneupdate and virtiogpuresourceflush functions fail to properly acquire a required lock, which can lead to a race condition. A local user could exploit this vulnerability by triggering a memory...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: virtio-gpu: A missing check was fixed to avoid NULL dereferencing. cacheent could potentially be set to NULL inside virtiogpucmdgetcapset, which could lead to a NULL dereferencing due to its recent use i.e., ptr =...

Linux Direct Rendering DMA Fence Wait DoS

The vulnerability of the virtiogpudmafencewait function in the drivers/gpu/drm/virtio/virtgpusubmit.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this...

SUSE-SU-2026:23351-1 Security update for qemu

This update for qemu fixes the following issue: - CVE-2026-3886: lack of proper validation of user-supplied data in the virtio-gpu driver can lead to local privilege escalation via an integer overflow bsc1268061. Other updates and bugfixes: - Service: switch back to tarscm. - Bug fixes:...

SUSE-SU-2026:23362-1 Security update for qemu

This update for qemu fixes the following issue: - CVE-2026-3886: lack of proper validation of user-supplied data in the virtio-gpu driver can lead to local privilege escalation via an integer overflow bsc1268061. Other updates and bugfixes: - Service: switch back to tarscm. - Bug fixes:...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Ensure that objs is not NULL in virtiogpuarrayputfree. If virtiogpuobjectshmeminit fails e.g., due to fault injection, as happened in the bug report by syzbot, virtiogpuarrayputfree might be called with objs being NUL...