CVE-2026-23425 | Linux Kernel up to 6.18.16/6.19.6/7.0-rc1 KVM pkvm_init_features_from_host initialization

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.18.16/6.19.6/7.0-rc1. The affected element is the function pkvm_init_features_from_host of the component KVM. The manipulation leads to improper initialization.

This vulnerability is uniquely identified as CVE-2026-23425. The attack can only be initiated within the local network. No exploit exists.

It is advisable to upgrade the affected component.