51 matches found
CVE-2026-98863
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GETNESTEDSTATEPAGES if getting said pages fails Re-pend GETNESTEDSTATEPAGES before exiting to userspace if getting the nested pages fails in the KVMRUN path. If userspace re-runs the vCPU, and vmcs02 holds valid...
CVE-2026-98863
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GETNESTEDSTATEPAGES if getting said pages fails Re-pend GETNESTEDSTATEPAGES before exiting to userspace if getting the nested pages fails in the KVMRUN path. If userspace re-runs the vCPU, and vmcs02 holds valid...
CVE-2026-98863 KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GETNESTEDSTATEPAGES if getting said pages fails Re-pend GETNESTEDSTATEPAGES before exiting to userspace if getting the nested pages fails in the KVMRUN path. If userspace re-runs the vCPU, and vmcs02 holds valid...
CVE-2026-98863
The Linux kernel contains a vulnerability in the KVM x86 component related to how GET_NESTED_STATE_PAGES is handled. If obtaining nested pages fails during the KVM_RUN path, the request was not re-pended before exiting to userspace. This could allow KVM to re-enter L2 with stale, unpinned PFNs fr...
CVE-2026-98863: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GETNESTEDSTATEPAGES if getting said pages fails Re-pend GETNESTEDSTATEPAGES before exiting to userspace if getting the nested pages fails in the KVMRUN path. If userspace re-runs the vCPU, and vmcs02 holds valid...
Linux Distros Unpatched Vulnerability : CVE-2026-98863
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86: Re-pend GETNESTEDSTATEPAGES if getting said pages fails Re-pend GETNESTEDSTATEPAGES before exiting to userspace if getting the nested pages fails in t...
PT-2026-117082
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GET NESTED STATE PAGES if getting said pages fails Re-pend GET NESTED STATE PAGES before exiting to userspace if getting the nested pages fails in the KVM RUN path. If userspace re-runs the vCPU, and vmcs02 hold...
Security update for qemu (important)
openSUSE security update: security update for qemu ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22047-1 Rating: important References: bsc1263864 bsc1279962 bsc1282077 bsc1282578 bsc1282918 Cross-References: CVE-2026-81627 CVE-2026-93834 CVSS...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.4 contains a security vulnerability. This vulnerability arises from KVM x86 failing to re-hang the GETNESTEDSTATEPAGES request before exiting user space when attempting to obtain nested pages. As a result, KVM may use an expired and unstable PFN to re-enter L2, and the...
OPENSUSE-SU-2026:22047-1 Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset DLCK protection and injecting code into System Management Mode memory bsc1282077. -...
SUSE-SU-2026:24159-1 Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset DLCK protection and injecting code into System Management Mode memory bsc1282077. -...
SUSE-SU-2026:24115-1 Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset DLCK protection and injecting code into System Management Mode memory bsc1282077. -...
SUSE CVE-2026-81627
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...
AZL-105275 CVE-2026-81627 affecting package qemu 10.1.0-1
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...
CVE-2026-81627
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...
UBUNTU-CVE-2026-81627
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...
CVE-2026-81627
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...
CVE-2026-81627
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...
EUVD-2026-82872
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...
CVE-2026-81627 Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...