In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure In… (CVE-2026-98433)

The vulnerability occurs in the kvmppc_svm_page_in() function of the Linux kernel's KVM PPC Book3S HV code. If uv_page_in() fails after a successful kvmppc_uvmem_get_page(), the secure device page is not released due to skipped cleanup steps. This results in permanent consumption of secure memory pool entries, leaked private page structures, and guest frame numbers marked as secure and unusable for the VM's lifetime. The fix involves unlocking and releasing the page properly on failure, mirroring the handling in the analogous __kvmppc_svm_page_out() function. This issue is relevant on POWER9/10 systems with Ultravisor/PEF and occurs when uv_page_in() returns errors such as UV pool exhaustion.

The vulnerability causes a permanent leak of secure device pages and associated memory structures in the secure memory pool, reducing available secure memory and rendering certain guest frame numbers unusable for the lifetime of the affected virtual machine. This can degrade system stability and resource availability on POWER9/10 systems running Ultravisor/PEF. There is no indication of remote code execution or privilege escalation from the provided data.

A fix is available that applies proper resource cleanup on uv_page_in() failure by unlocking and releasing the page, preventing the secure device page leak. Users should apply the official Linux kernel patch that addresses this issue. Since this is a kernel-level vulnerability, upgrading to a patched kernel version is the recommended remediation. No alternative mitigations are indicated.