CVE-2026-72285

In the Linux kernel, the following vulnerability has been resolved: KVM: TDX: Reject concurrent change to CPUID entry count Reject KVMTDXINITVM if userspace changes cpuid.nent between the initial read and the subsequent copy of the initialization data. tdxtdinit first reads userdata-cpuid.nent to...

EUVD-2026-59184

In the Linux kernel, the following vulnerability has been resolved: KVM: TDX: Reject concurrent change to CPUID entry count Reject KVMTDXINITVM if userspace changes cpuid.nent between the initial read and the subsequent copy of the initialization data. tdxtdinit first reads userdata-cpuid.nent to...

CVE-2026-72285

CVE-2026-72285 affects the Linux kernel (KVM/TDX) where concurrent modification of cpuid.nent during VM init could cause CPUID parsing to access beyond copied entries. The vulnerability arises in tdx_td_init(): it reads user_data->cpuid.nent to size the kvm_tdx_init_vm copy, but the copied str...