kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has already finished that phase of instructi...

CVE-2026-64604

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8 intercepts, get vmcs12 if and only if the vCPU is in guest mode so that a future change can have update CR8 intercepts during vCPU...

EUVD-2026-53790

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8 intercepts, get vmcs12 if and only if the vCPU is in guest mode so that a future change can have update CR8 intercepts during vCPU...

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has already finished that phase of instructi...

kernel: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM x86 memory management unit MMU. A malicious guest operating system could create a hugepage mapping that extends beyond the boundaries of its allocated memory slot. This improper handling of memory boundaries by KVM can lead t...

kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine x86 shadow paging mechanism. This use-after-free vulnerability arises from incorrect handling of Guest Frame Numbers GFNs when guest page tables are modified. A local attacker with control over a guest virtual machine could...

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has already finished that phase of instructi...

CVE-2022-4994

CVE-2022-4994 concerns a Linux kernel KVM/x86 issue where the fast IN path for in-kernel PIO was adjusted. The change routes fast PIO through __emulator_pio_in() directly instead of bouncing via emulator_pio_in(), since __emulator_pio_in() now fills the required value and vcpu->arch.pio.count ...

CVE-2022-4994

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: wean fast IN from emulatorpioin Use emulatorpioin directly for fast PIO instead of bouncing through emulatorpioin now that emulatorpioin fills "val" when handling in-kernel PIO. vcpu-arch.pio.count is guaranteed to be...

CVE-2026-64282

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for arm64 architectures. A race condition between the kvmtranslatevncr function and an MMU Memory Management Unit notifier can lead to a Page Frame Number PFN leak. This occurs because an early return in kvmtranslatevncr fail...

CVE-2026-64284

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for x86 systems. This vulnerability occurs when KVM handles fastpath exits, where it may fail to execute vendor-specific cleanup operations before returning control to the virtual machine's userspace. Consequently, memory...

CVE-2026-64287

A flaw was found in the Kernel-based Virtual Machine KVM component of the Linux kernel on ARM64 systems. A highly privileged local attacker could exploit a vulnerability where the system fails to properly restrict memory access during a specific virtual machine operation. This could allow the...

CVE-2026-64283

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. An integer overflow vulnerability exists in the guestmemfd functionality when binding memory slots. A malicious guest operating system could exploit this by providing crafted offset and size values, leading to...

SUSE-SU-2026:3383-1 Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648. - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpecte...

SUSE-SU-2026:3351-1 Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues: The following security issues were fixed: - CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648. - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to...

Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.136 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060...

SUSE SLES15 Security Update : kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3286-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3286-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.31 fixes various security issues: The following security issues were fixed: -...

UBUNTU-CVE-2026-64555

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSREL2 restore in kvmhyphandlemops kvmhyphandlemops resets the single-step state machine as part of rewinding state for a MOPS exception by modifying vcpucpsr and writing the result directly into hardware. In...

CVE-2026-64555

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSREL2 restore in kvmhyphandlemops kvmhyphandlemops resets the single-step state machine as part of rewinding state for a MOPS exception by modifying vcpucpsr and writing the result directly into hardware. In...

CVE-2026-64285

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component, specifically within the Secure Nested Paging SNP guest functionality. When KVM populates a guest's CPUID Central Processor Unit Identifier data, it may attempt to write to a source memory page that is intended to b...