CVE-2026-63807 KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level

🗓️ 19 Jul 2026 12:02:10Reported by GoogleType

osv

osv🔗 osv.dev👁 3 Views

Fix KVM x86/mmu: verify shadow page GFN in memslot before mapping level check to prevent out-of-bounds.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-63807	19 Jul 202612:02	–	attackerkb
CVE	CVE-2026-63807	19 Jul 202612:02	–	cve
Cvelist	CVE-2026-63807 KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level	19 Jul 202612:02	–	cvelist
EUVD	EUVD-2026-45473	19 Jul 202612:02	–	euvd
NVD	CVE-2026-63807	19 Jul 202612:16	–	nvd
OSV	DEBIAN-CVE-2026-63807	19 Jul 202612:16	–	osv
OSV	UBUNTU-CVE-2026-63807	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61123	19 Jul 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-63807	20 Jul 202617:09	–	redhatcve
SUSE CVE	SUSE CVE-2026-63807	19 Jul 202617:34	–	susecve

Source	Link
git	www.git.kernel.org/stable/c/18587f9831612e24cd8f24be1ec15478feff7abc
git	www.git.kernel.org/stable/c/48b91ed7e22bb82571c34f8b80b6ecdc90a6fab8
git	www.git.kernel.org/stable/c/5cab1c989f938f5e1b9a0de66486f1fc2c28479b
git	www.git.kernel.org/stable/c/7b52008023b7facf40fba3ebe92449bda8ea53b9
git	www.git.kernel.org/stable/c/b2ae3245ea44dccaa9af676b6747476951883318
git	www.git.kernel.org/stable/c/c5c29b3c268332afe67d598a034c58344540ed92
git	www.git.kernel.org/stable/c/ef057cbf825e03b63f6edf5980f96abf3c53089d
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63807.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-63807
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

21 Jul 2026 03:47Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.18.8

EPSS0.00173

hugepage recovery shadow page memslot validation mapping level out of bounds guest memory fault