CVE-2026-89916: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry A VNCR TLB invalidation can occur on one vcpu while another vcpu is faulting in this same page. Without correctly handling this, we can end up with the...

CVE-2026-89912: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save MAPC with V=0 drops ite-collection but leaves the ITE on the device's ITT list, and vgicitssaveite dereferences it unconditionally. A guest that issues MAPD,...

CVE-2026-89910: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc Variable vector is declared on stack in function dmsintcinjectirq and sometimes it is used without initialized. Here fix this issue...

CVE-2026-89909: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Free init resources if kvminit fails kvmloongarchinit calls kvmloongarchenvinit to allocate the per-CPU kvmcontext vmcs and kvmloongarchops and to register the perf callbacks, and then calls kvminit. If kvminit...

CVE-2026-89908: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Preserve memslot arch flags on KVMMRFLAGSONLY kvmarchpreparememoryregion computes new-arch.flags, i.e. whether a memslot is KVMMEMHUGEPAGECAPABLE or KVMMEMHUGEPAGEINCAPABLE, only for KVMMRCREATE and KVMMRMOVE, and...

CVE-2026-89775: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation Computing the effects of a TLB invalidation involves looking at the size of the mapping cached by the TLB. For S1 mappings such as VNCR, this is deducted from...

PT-2026-93563

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM s390 architecture where the import wp info function fails to hold the kvm-srcu or kvm-slots lock when calling read guest abs. Because read guest abs utilizes k...

PT-2026-93552

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the KVM arm64 implementation, a flaw exists in how TLB Invalidation by Range is handled. Because the range can be based on an arbitrary Virtual Address VA, a guest could potentially...

CVE-2026-89923: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Free guest debug data on vcpu destroy kvms390clearbpdata is only called from kvmarchvcpuioctlsetguestdebug, i.e. when user space changes or disables debugging. A vCPU that is destroyed while hardware breakpoints are...

CVE-2026-89930: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter KVM services local TLB flushes on "full" nested VM-Exits through nestedvmxvmexit, but not if a nested VM-Enter fails e.g. due to failed VMCS checks in...

ROS-20260916-73-0042

The vulnerability of the nestedvmxcheckgueststate function in the arch/x86/kvm/vmx/nested.c module of the Linux KVM virtualization subsystem is related to the lack of checks on registers CR0 and CR1. Exploiting this vulnerability can allow an attacker to cause a failure in the guest operating...

CVE-2026-89924: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix olddata leak in guest debug error path importwpinfo allocates a per-watchpoint olddata buffer to back up the original guest memory contents. If a later watchpoint of the same KVMSETGUESTDEBUG request fails to impor...

Linux Distros Unpatched Vulnerability : CVE-2026-89916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry A VNCR TLB invalidation can occur on one vcpu while another vcpu is faulting in this sa...

Linux Distros Unpatched Vulnerability : CVE-2026-89926

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: Fix length check importwpinfo struct kvmhwbreakpoint::len is a u64 that is fully controlled by user space. This is then assigned to wpinfo-len, whic...

PT-2026-93568

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM x86 Hyper-V synthetic timer emulation where userspace or a guest can program a timer with a deadline in the past by causing an integer overflow. This occurs wh...

CVE-2026-89929: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, KVM executes INVVPID on the physical CPU using vpid02 instead of the L1 assigned VPID, after doing some validations on the operands. However...

PT-2026-93573

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM nVMX component where vpid02 is not consistently flushed upon first use. This occurs because last vpid is not reset when vpid02 is freed during a VMXOFF...

CVE-2026-89927: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock Fix an issue where userspace or the guest can program an Hyper-V synthetic timer to have a deadline in the past via integer overflow, preventing the CPU from making...

PT-2026-93570

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM nested VM nVM implementation where the INVVPID instruction may be emulated on an incorrect physical CPU. When emulating INVVPID, KVM uses vpid02 on the current...

PT-2026-93571

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM nVMX component where local TLB flushes are not serviced when a nested VM-Enter fails, such as during failed VMCS checks in the nested vmx enter non root mode...