SUSE CVE-2026-62434

A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...

CVE-2026-62434

A flaw was found in Xen. When a guest operating system is started with Populated on Demand PoD enabled, it can attempt to reclaim memory pages that are not regular guest RAM. This action can lead to the corruption of Xen's memory management state, potentially causing system instability or denial ...

CVE-2026-62430

A flaw was found in Xen. This vulnerability allows a guest operating system to read data beyond its intended memory boundaries, potentially leading to information disclosure. The issue arises from improper synchronization during access to the CMOS Complementary Metal-Oxide-Semiconductor memory. A...

CVE-2026-62434

A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...

CVE-2026-62434

CVE-2026-62434 affects Xen-based environments where a guest with Populated on Demand (PoD) enabled can reclaim non-regular guest RAM pages, potentially corrupting the guest memory management state. The issue is described consistently across NVD/NVD-linked entries and corroborated by multiple vend...

CVE-2026-62434 PoD: Don't try to reclaim special pages

A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...

CVE-2026-62434

A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...

CVE-2026-62434

A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen...

PoD: Don't try to reclaim special pages

ISSUE DESCRIPTION A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen. IMPACT A buggy or malicious guest can cause corruption of Xen's state, leading to crashes or other...

SUSE CVE-2026-64283

In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guestmemfd file, treat the offset and size as unsigned values to fix a bug where the sum of the two can result in a false negative...

CVE-2026-64283

In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guestmemfd file, treat the offset and size as unsigned values to fix a bug where the sum of the two can result in a false negative...

UBUNTU-CVE-2026-64285

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...

EUVD-2026-48995

In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guestmemfd file, treat the offset and size as unsigned values to fix a bug where the sum of the two can result in a false negative...

Linux Distros Unpatched Vulnerability : CVE-2026-64285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest,...

CVE-2026-49744

CVE-2026-49744 involves kernel software running in a Guest VM that may post commands to the GPU firmware, causing writes outside the Guest’s virtualized GPU memory. The issue stems from out-of-bounds accesses triggered by malware introduced to a Guest KMD, potentially enabling privilege escalatio...

CVE-2026-63938

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM Secure Encrypted Virtualization SEV feature. When processing Page State Change PSC requests, the system does not properly validate the PSC buffer against the effective size of the scratch area. This can occur if a guest...

CVE-2026-63806

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. A malicious guest operating system can trigger a host kernel crash, leading to a Denial of Service DoS. This occurs when the guest performs a specific memory write operation that causes an unaligned memory access...

CVE-2026-63807

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM x86 memory management unit MMU. A malicious guest operating system could create a hugepage mapping that extends beyond the boundaries of its allocated memory slot. This improper handling of memory boundaries by KVM can lead t...

CVE-2026-64104 virt: sev-guest: Explicitly leak pages in unknown state

In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Explicitly leak pages in unknown state When setmemoryencrypted,decrypted fail, the user cannot know at which point the function failed, meaning that the pages are left in an unknown state from the point of view o...

CVE-2026-64104

CVE-2026-64104 (Linux kernel) affects virt: sev-guest where set_memory_encrypted()/set_memory_decrypted() can fail leaving pages in an unknown state, potentially unencrypted and not safely returnable to the buddy allocator. The provided documentation notes that to avoid this, the pages should not...