In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state Explicitly flush caches after intra-host migration before clearing "SEV active" on the source VM, as doing cache maintenance afterwards creates a tiny window where memory reclaim could return memory to the host without performing a cache flush, e.g. as pointed out by Sashiko: CPU1 in sev_migrate_from(): src->active = false; CPU2 running concurrent unmap: Since active is false, the automatic cache flush in sev_guest_memory_reclaimed is skipped. The host frees and reallocates the page. CPU1 in sev_migrate_from(): sev_writeback_caches(src_kvm); Executes a hardware cache flush (wbnoinvd), which writes the guest's old dirty ciphertext over the new page owner's data.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance on the     source VM *before* clearing SEV state Explicitly flush caches after intra-host migration before clearing     SEV active on the source VM, as doing cache maintenance afterwards creates a tiny window where memory     reclaim could return memory to the host without performing a cache flush, e.g. as pointed out by Sashiko:
    CPU1 in sev_migrate_from(): src->active = false; CPU2 running concurrent unmap: Since active is false, the     automatic cache flush in sev_guest_memory_reclaimed is skipped. The host frees and reallocates the page.
    CPU1 in sev_migrate_from(): sev_writeback_caches(src_kvm); Executes a hardware cache flush (wbnoinvd),     which writes the guest's old dirty ciphertext over the new page owner's data. (CVE-2026-98718)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
379497	SUSE SLES16 Security Update : kernel (SUSE-SU-2026:24651-1)	Nessus	SuSE Local Security Checks	Local	high
379474	SUSE SLES16: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:24662-1)	Nessus	SuSE Local Security Checks	Local	high
367535	Linux Distros Unpatched Vulnerability : CVE-2026-98718	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-98718

medium

Tenable Plugins

high

high

medium