CVE-2026-63939 KVM: SEV: Compute the correct max length of the in-GHCB scratch area

🗓️ 19 Jul 2026 14:55:35Reported by GoogleType

osv

osv🔗 osv.dev👁 4 Views

KVM SEV fix computes max GHCB scratch length to prevent overflows; len renamed to min_len.

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2026-63939	19 Jul 202614:55	–	cve
Cvelist	CVE-2026-63939 KVM: SEV: Compute the correct max length of the in-GHCB scratch area	19 Jul 202614:55	–	cvelist
EUVD	EUVD-2026-45712	19 Jul 202614:55	–	euvd
NVD	CVE-2026-63939	19 Jul 202616:17	–	nvd
OSV	DEBIAN-CVE-2026-63939	19 Jul 202616:17	–	osv
OSV	UBUNTU-CVE-2026-63939	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61256	19 Jul 202600:00	–	ptsecurity
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-63939	20 Jul 202600:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/5867d7e202e09f037cefe77f7af4413c7c0fa088
git	www.git.kernel.org/stable/c/6644565527c4c5f507088b1c9ddf72de47790b68
git	www.git.kernel.org/stable/c/6ca9400d36005ffdca25f80186bea781c7e1dc4c
git	www.git.kernel.org/stable/c/9f0a9e780f02c02d025a190f1885e1d1d73b87bd
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63939.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-63939
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

21 Jul 2026 03:46Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.19.3

EPSS0.00216

guest hypervisor block sev vulnerability scratch area size maximum scratch length minimum length rename