CVE-2026-74516 KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active

🗓️ 15 Aug 2026 12:27:36Reported by LinuxType

KVM SVM fails to update x2APIC MSR intercepts when AVIC is inhibited while L2 is active, allowing L1 DoS or host state exposure.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-74516	15 Aug 202612:27	–	attackerkb
CVE	CVE-2026-74516	15 Aug 202600:00	–	cve
Debian CVE	CVE-2026-74516	15 Aug 202600:00	–	debiancve
EUVD	EUVD-2026-59709	15 Aug 202612:27	–	euvd
NVD	CVE-2026-74516	15 Aug 202613:17	–	nvd
OSV	DEBIAN-CVE-2026-74516	15 Aug 202613:17	–	osv
Positive Technologies	PT-2026-72968	15 Aug 202600:00	–	ptsecurity

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "arch/x86/kvm/svm/avic.c"
    ],
    "versions": [
      {
        "version": "091abbf578f926e763adc0f577baeb7f405b4bdc",
        "lessThan": "6664a5aea45318f4ec156a729949b474dd6e3159",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "091abbf578f926e763adc0f577baeb7f405b4bdc",
        "lessThan": "f12373625b4dc9bcc89c41872648878c73bb9272",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "091abbf578f926e763adc0f577baeb7f405b4bdc",
        "lessThan": "7668c58dcf465559dc7a0d2e95e9cb79cf47454b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "091abbf578f926e763adc0f577baeb7f405b4bdc",
        "lessThan": "89f9e8398e79c49886766fc24a84c37726231104",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "091abbf578f926e763adc0f577baeb7f405b4bdc",
        "lessThan": "7d3aae206663c4e006b25a1c7a20a4029e67da76",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "arch/x86/kvm/svm/avic.c"
    ],
    "versions": [
      {
        "version": "6.0",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.0",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.151",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.103",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.44",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.8",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2-rc6",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/89f9e8398e79c49886766fc24a84c37726231104
git	www.git.kernel.org/stable/c/f12373625b4dc9bcc89c41872648878c73bb9272
git	www.git.kernel.org/stable/c/7d3aae206663c4e006b25a1c7a20a4029e67da76
git	www.git.kernel.org/stable/c/7668c58dcf465559dc7a0d2e95e9cb79cf47454b
git	www.git.kernel.org/stable/c/6664a5aea45318f4ec156a729949b474dd6e3159

15 Aug 2026 12:27Current