SUSE CVE-2026-53345

In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying When marking a page dirty, complain about not having a running/loaded vCPU if and only if the VM is still alive, i.e. its refcount is non-zero. This will...

CVE-2025-48517

CVE-2025-48517 concerns AMD SEV firmware where insufficient granularity of access control could let a privileged attacker with a malicious hypervisor create a SEV-ES guest using an ASID reserved for SEV-SNP guests, potentially causing partial confidentiality loss. Reported across multiple sources...

CVE-2025-48514: Insufficient Granularity of Access Control

Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidentiality...