CVE-2026-43096 Details
Description
In the Linux kernel, the following vulnerability has been resolved: mshv: Fix infinite fault loop on permission-denied GPA intercepts Prevent infinite fault loops when guests access memory regions without proper permissions. Currently, mshv_handle_gpa_intercept() attempts to remap pages for all faults on movable memory regions, regardless of whether the access type is permitted. When a guest writes to a read-only region, the remap succeeds but the region remains read-only, causing immediate re-fault and spinning the vCPU indefinitely. Validate intercept access type against region permissions before attempting remaps. Reject writes to non-writable regions and executes to non-executable regions early, returning false to let the VMM handle the intercept appropriately. This also closes a potential DoS vector where malicious guests could intentionally trigger these fault loops to consume host resources.
A vulnerability in the Linux kernel's Hyper-V lightweight virtualization feature (mshv) can lead to an infinite fault loop when a guest virtual machine accesses memory regions without the proper permissions. This issue arises because the function responsible for handling guest physical address intercepts attempts to remap pages for all faults on movable memory regions, regardless of the access type allowed. As a result, when a guest writes to a read-only area, the remap is successful but the region remains read-only, causing an immediate re-fault and trapping the virtual CPU in an endless loop. This vulnerability also presents a potential denial-of-service risk, as malicious guests could exploit the fault loops to drain host resources.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux kernel official website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/02226839079ccc558820a3b25c4c46812927b4ba | kernel.org | Patch |
| https://git.kernel.org/stable/c/16cbec24897624051b324aa3a85859c38ca65fde | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-835 | Loop with Unreachable Exit Condition ('Infinite Loop') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.19, < 6.19.14 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 7.0 rc7 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 19, 2026 | Initial Analysis | [email protected] |
| May 6, 2026 | New CVE Received | kernel.org |