Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-98465

RISC-V: KVM: Serialize IMSIC attributes with vCPU migration

CVSS 7.0 HighEPSS 0.0014 · 3rd percentile

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:15 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected db8b7e97d6137a28b2bfc07e591d54da268f0c36 to before 6c2bcf6b173d4afed883cceea9d47f2c5194161d git
  • affected db8b7e97d6137a28b2bfc07e591d54da268f0c36 to before a29c5d2dd2ef9a8617a9a6d5585696d5f149cd98 git
  • affected db8b7e97d6137a28b2bfc07e591d54da268f0c36 to before c525772c304c971b0d3a1f2898dedbae653efe90 git
  • affected db8b7e97d6137a28b2bfc07e591d54da268f0c36 to before 71acbea44e78665ea90e3c310fca6bbdcc0252db git
  • affected db8b7e97d6137a28b2bfc07e591d54da268f0c36 to before 8ae12ccaec6ec74945d8c1ef39f2c1b8df779abc git
Other versions: unaffected
Linux Linux
  • affected 6.5
  • unaffected before 6.5 semver
  • unaffected 6.6.160 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.55 to 6.18.*, inclusive semver
  • unaffected 7.2.9 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98465
CNA
Linux
Tags
Published
18 Oct 2026
Updated
24 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.0 High 3.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0014, the 3rd percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.