EUVD-2026-64390
GHSA-j7pf-235f-jcqv
Severity by source
AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Guest VM provides local access without host privileges; T10 PI path causes host kernel panic representing a scope change; no confidentiality or integrity impact.
Primary rating from Vendor (Linux).
CVSS VectorVendor: Linux
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Lifecycle Timeline
5DescriptionCVE.org
In the Linux kernel, the following vulnerability has been resolved:
vhost-scsi: Validate T10 PI scatterlist counts
When T10 PI is negotiated, vhost-scsi splits protection bytes from the data iterator before mapping the request scatterlists. A malformed request can claim protection bytes that cover or exceed the full payload length. The former leaves no data bytes to map, while the latter underflows exp_data_len before advancing the iterator. Both cases can let a zero data SGL count reach sg_alloc_table_chained(), which triggers BUG_ON(!nents).
Reject protection lengths that cover or exceed the payload before subtracting prot_bytes and advancing the iterator. Also propagate negative errors from the protection SGL calculation before calling the allocator, matching the data SGL path.
AnalysisAI
Kernel panic in Linux kernel's vhost-scsi subsystem can be triggered by a malicious guest VM when T10 Protection Information (PI) is negotiated, crashing the host kernel and all co-hosted virtual machines. A guest sends a malformed SCSI request with protection byte lengths equal to or exceeding the payload, causing an integer underflow or zero-count scatterlist that hits an unconditional BUG_ON assertion in sg_alloc_table_chained(). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | T10 Protection Information (T10 PI) must be negotiated between the guest and the vhost-scsi host driver - this is an explicit, non-default configuration requiring both the storage backend and the guest to support and enable T10 PI. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H, score 7.1) correctly reflects the threat model: a guest VM attacker needs no host-level privileges but can cause a Changed Scope host kernel panic. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with control of a guest VM on an unpatched Linux host using vhost-scsi with T10 PI negotiated crafts a virtio-scsi request where the declared protection information byte count equals or exceeds the data payload length. The host kernel's vhost-scsi handler subtracts prot_bytes from exp_data_len without prior validation, producing zero or an underflowed count, then passes zero nents to sg_alloc_table_chained(), which immediately fires BUG_ON(!nents), panicking the host kernel and taking down all other VMs on the same host. … |
| Remediation | Upgrade the Linux kernel to version 6.18.45, 7.1.9, or 7.2 or later, which incorporate the fix that validates protection byte lengths before arithmetic on exp_data_len and propagates errors from the protection SGL calculation before invoking sg_alloc_table_chained(). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Linux hypervisors using vhost-scsi (KVM/QEMU-based systems) and cross-reference kernel versions against affected versions in the vendor security advisory. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today