Linux arch/x86/kvm/svm/sev.c Heap Buffer Overflow DoS

The vulnerability of the sevvmmoveenccontextfrom function in the arch/x86/kvm/svm/sev.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 7.2.10 have a security vulnerability. This vulnerability stems from improper handling of control fields by the KVM SVM when VMRUN fails, which may result in the operation requested for the control field not being executed...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 3.16.57 to 3.17, 4.4.168 to 4.5, and 4.16. These vulnerabilities stem from the KVM SVM incorrectly assuming the MSR bitmap of vmcb02 when checking whether an MSR is intercepted. Instead of using the MSR permission bitmap of the active...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Set/clear CR8 write interception when AVIC is deactivated The issue was addressed by explicitly setting/clearing the CR8 write interception when AVIC is deactivated. This fixes a bug where KVM kept the interception...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...

AlmaLinux 9 : kernel (ALSA-2026:74438)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:74438 advisory. kernel: RDMA/uverbs: Validate wqesize before using it in ibuverbspostsend CVE-2026-45856 kernel: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT...

RHEL 9 : kernel (RHSA-2026:74438)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74438 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: RDMA/uverbs: Validate wqesize...

Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: RDMA/uverbs: Validate wqesize before using it in ibuverbspostsend CVE-2026-45856 kernel: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT path CVE-2026-63794 kernel: futex: Fix race...

ALSA-2026:74438 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: RDMA/uverbs: Validate wqesize before using it in ibuverbspostsend CVE-2026-45856 kernel: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT path CVE-2026-63794 kernel: futex: Fix race...

ROS-20260924-73-0031

The vulnerability of the sevmigratefrom function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux operating system’s x86 kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker ...

Linux KVM Nested Buffer Overflow DoS

The vulnerability of the nestedvmcb02preparecontrol function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability...

Nested Sync Control DoS

The vulnerability in the nestedsynccontrolfromvmcb02 function within the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on x86-based Linux kernel platforms is related to synchronization errors when using a shared resource “race condition”. Exploitation of this vulnerability may...

Linux Kernel DoS

The vulnerability in the invlpgainterception function within the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on x86-based Linux kernel platforms is related to error handling flaws. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

SUSE CVE-2026-74607

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Interaction between KVMCAPVMMOVEENCCONTEXTFROM and KVMCAPVMCOPYENCCONTEXTFROM can cause two separate issues: - in sevmigratefrom, when the destination K...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0)

Summary Vulnerabilities exists in IBM Cloud Pak for Data System CPDS 1.0 addressed in 11.3.1.2-IF1 Vulnerability Details CVEID:CVE-2025-38527 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifsoplockbreak A race condition can...

Linux Kernel DoS

The vulnerability in the sevessyncvmsa function within the arch/x86/kvm/svm/sev.c subsystem of the virtualization sub-system on x86-based Linux kernel systems is related to synchronization errors. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

CVE-2026-74607

A flaw was found in the Kernel-based Virtual Machine KVM Secure Virtual Machine SVM module within the Linux kernel. This vulnerability involves a race condition during the management of encrypted virtual machine contexts, specifically when handling owner and mirror lists. A privileged user or...

AZL-97085 CVE-2026-74607 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Interaction between KVMCAPVMMOVEENCCONTEXTFROM and KVMCAPVMCOPYENCCONTEXTFROM can cause two separate issues: - in sevmigratefrom, when the destination K...

CVE-2026-74607

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Interaction between KVMCAPVMMOVEENCCONTEXTFROM and KVMCAPVMCOPYENCCONTEXTFROM can cause two separate issues: - in sevmigratefrom, when the destination K...

UBUNTU-CVE-2026-74607

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Interaction between KVMCAPVMMOVEENCCONTEXTFROM and KVMCAPVMCOPYENCCONTEXTFROM can cause two separate issues: - in sevmigratefrom, when the destination K...