Lucene search
+L

44 matches found

SUSE CVE
SUSE CVE
•added 2026/09/19 1:42 a.m.•7 views

SUSE CVE-2026-89929

In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, KVM executes INVVPID on the physical CPU using vpid02 instead of the L1 assigned VPID, after doing some validations on the operands. However...

8.8CVSS5.8AI score0.00175EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/16 11:17 a.m.•11 views

AZL-101277 CVE-2026-89929 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, KVM executes INVVPID on the physical CPU using vpid02 instead of the L1 assigned VPID, after doing some validations on the operands. However...

8.8CVSS5.8AI score0.00175EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 11:17 a.m.•13 views

CVE-2026-89929

In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, KVM executes INVVPID on the physical CPU using vpid02 instead of the L1 assigned VPID, after doing some validations on the operands. However...

8.8CVSS0.00175EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/16 11:17 a.m.•13 views

DEBIAN-CVE-2026-89929

In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, KVM executes INVVPID on the physical CPU using vpid02 instead of the L1 assigned VPID, after doing some validations on the operands. However...

8.8CVSS5.9AI score0.00175EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 10:32 a.m.•10 views

EUVD-2026-80529

In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, KVM executes INVVPID on the physical CPU using vpid02 instead of the L1 assigned VPID, after doing some validations on the operands. However...

8.8CVSS5.8AI score0.00175EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/16 10:32 a.m.•42 views

CVE-2026-89929 KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU

In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, KVM executes INVVPID on the physical CPU using vpid02 instead of the L1 assigned VPID, after doing some validations on the operands. However...

8.8CVSS0.00175EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/16 10:32 a.m.•10 views

CVE-2026-89929 KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU

In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, KVM executes INVVPID on the physical CPU using vpid02 instead of the L1 assigned VPID, after doing some validations on the operands. However...

8.8CVSS5.8AI score
SaveExploits0References7
CVE
CVE
•added 2026/09/16 10:32 a.m.•31 views

CVE-2026-89929

CVE-2026-89929 affects the Linux kernel KVM subsystem, specifically the nested virtualization (nVM ) code path that emulates the INVVPID instruction. When a guest L1 vCPU migrates between physical CPUs and issues INVVPID, KVM executes the instruction on the current physical CPU rather than the on...

8.8CVSS5.8AI score0.00175EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•9 views

CVE-2026-89929: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, KVM executes INVVPID on the physical CPU using vpid02 instead of the L1 assigned VPID, after doing some validations on the operands. However...

8.8CVSS5.8AI score0.00175EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•2 views

PT-2026-93570

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM nested VM nVM implementation where the INVVPID instruction may be emulated on an incorrect physical CPU. When emulating INVVPID, KVM uses vpid02 on the current...

8.8CVSS5.7AI score0.00175EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-89929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, KVM executes INVVPID on the physical CPU using vpid02 instead of the L1...

8.8CVSS5.9AI score0.00175EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000665 advisory. arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to...

5.5CVSS6.7AI score0.00428EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•15 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002169)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002169 advisory. arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to...

5.5CVSS6.7AI score0.00428EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•10 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001964)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001964 advisory. arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to...

5.5CVSS6.7AI score0.00428EPSS
SaveExploits0References15
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2016-2666

Malware in sbrugna...

6.3CVSS7.2AI score0.01277EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•8 views

EUVD-2014-3603

Malware in sbrugna...

5.5CVSS6.6AI score0.00428EPSS
SaveExploits0References22
OSV
OSV
•added 2025/07/19 12:15 p.m.•15 views

UBUNTU-CVE-2025-38351

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In KVM guests with Hyper-V hypercalls enabled, the hypercalls HVCALLFLUSHVIRTUALADDRESSLIST and HVCALLFLUSHVIRTUALADDRESSLISTEX allow a guest to request...

5.5CVSS6.1AI score0.00168EPSS
SaveExploits0References27
CVE
CVE
•added 2025/07/19 11:59 a.m.•123 views

CVE-2025-38351

CVE-2025-38351 affects the Linux kernel KVM component (x86) when Hyper-V hypercalls are enabled. The issue arises in PV TLB flush processing where non-canonical GVAs can reach INVVPID/INVLPGA paths, potentially triggering VM-Fail on Intel hardware (AMD may ignore). In practice, this can allow a g...

5.5CVSS7.1AI score0.00168EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/19 12:00 a.m.•2 views

CVE-2025-38351: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In KVM guests with Hyper-V hypercalls enabled, the hypercalls HVCALLFLUSHVIRTUALADDRESSLIST and HVCALLFLUSHVIRTUALADDRESSLISTEX allow a guest to request...

5.5CVSS5.8AI score0.00168EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/25 12:00 a.m.•19 views

PT-2025-30134

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the KVM component related to handling hypercalls HVCALL FLUSH VIRTUAL ADDRESS LIST and HVCALL FLUSH VIRTUAL ADDRESS LIST EX within KVM guests utilizin...

6.8CVSS6.4AI score0.00168EPSS
SaveExploits0
Rows per page
Query Builder