{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.2.10-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state  Explicitly flush caches after intra-host migration before clearing \"SEV active\" on the source VM, as doing cache maintenance afterwards creates a tiny window where memory reclaim could return memory to the host without performing a cache flush, e.g. as pointed out by Sashiko:    CPU1 in sev_migrate_from():     src-\u003eactive = false;    CPU2 running concurrent unmap:     Since active is false, the automatic cache flush in     sev_guest_memory_reclaimed is skipped.     The host frees and reallocates the page.    CPU1 in sev_migrate_from():     sev_writeback_caches(src_kvm);     Executes a hardware cache flush (wbnoinvd), which writes the guest's old     dirty ciphertext over the new page owner's data.",
  "id": "DEBIAN-CVE-2026-98718",
  "modified": "2026-10-19T04:47:36.006415514Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-98718"
    }
  ],
  "upstream": [
    "CVE-2026-98718"
  ]
}