CVE-2026-89932

A flaw was found in the Kernel-based Virtual Machine KVM subsystem. This vulnerability occurs when KVM reuses a Virtual Processor ID VPID without properly flushing Translation Lookaside Buffer TLB entries. A malicious guest virtual machine VM could potentially exploit this to access stale TLB...

CVE-2026-64247 KVM: x86: hyper-v: Bound the bank index when querying sparse banks

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when querying sparse banks When checking if a VP ID is included in a sparse bank set, explicitly check that the ID can actually be contained in a sparse bank the TLFS allows for a maximum o...

CVE-2026-64247

CVE-2026-64247 concerns the Linux kernel KVM code for x86 with hyper-v virtualization. The issue arises when checking if a VP ID is in a sparse bank set: the VP ID could be copied without bounds checking, risking an out-of-bounds read when testing the sparse bank and potentially triggering an unn...