What is CVE-2026-98714?

CVE-2026-98714 is a unscored severity Linux kernel vulnerability. CVE-2026-98714 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-98714?

CVE-2026-98714 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-98714?

Yes, CVE-2026-98714 has been patched. Fixed versions include 7.2.10 and 7.3.

Is CVE-2026-98714 actively exploited?

CVE-2026-98714 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-98714

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded Leave control.erap_ctl and control.clean as-is in the VMCS if VMRUN fails, because as per AMD: there's no explicit architectural guarantee about the behavior in the presence of VMRUN failures. So the best thing to do would be to assume that if VMRUN fails, the actions requested in the control fields may not have been performed.

Package Linux Kernel

Published 2026-10-18

Last modified 2026-10-18

Patch available

Yes

Affected versions

Fixed in 7.2.10, 7.3 and their respective stable series.

Fixed in

✓ 7.2.10 7.2.x ✓ 7.3

References

2 total

Frequently asked questions

What is CVE-2026-98714?

CVE-2026-98714 is a unscored severity Linux kernel vulnerability . CVE-2026-98714 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-98714?

Yes. CVE-2026-98714 has been patched. Fixed versions include 7.2.10 and 7.3.
Is CVE-2026-98714 actively exploited?

No. CVE-2026-98714 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.