SUSE CVE-2026-80891

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages The AIBV holds one bit per MSI-X vector for a given function. The size of the bit vector is derived from the NOI and the AIBVO. If the size of the AIBV exceeds a...

snapchange

Snapchange Lightweight fuzzing of a memory snapshot using KVM Snapchange provides the ability to load a raw memory dump and register state into a KVM virtual machine VM for execution. At a point in execution, this VM can be reset to its initial state by resetting the dirty pages found by KVM or...

AZL-99477 CVE-2026-80891 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages The AIBV holds one bit per MSI-X vector for a given function. The size of the bit vector is derived from the NOI and the AIBVO. If the size of the AIBV exceeds a...

CVE-2026-80891

CVE-2026-80891 affects the Linux kernel 's KVM s390 PCI subsystem. The vulnerability arises when the AIBV (Adaptive Interrupt Bit Vector) size—derived from the NOI and AIBVO—exceeds a single page boundary, making it impossible to safely pin the guest page. Additionally, the AISB (Adaptive Interru...

CVE-2026-80891 KVM: s390: pci: Validate AIBV and AISB before pinning guest pages

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages The AIBV holds one bit per MSI-X vector for a given function. The size of the bit vector is derived from the NOI and the AIBVO. If the size of the AIBV exceeds a...

CVE-2026-80891

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages The AIBV holds one bit per MSI-X vector for a given function. The size of the bit vector is derived from the NOI and the AIBVO. If the size of the AIBV exceeds a...

EUVD-2026-71641

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages The AIBV holds one bit per MSI-X vector for a given function. The size of the bit vector is derived from the NOI and the AIBVO. If the size of the AIBV exceeds a...

CVE-2026-80873 KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESREL2 for injected nested SError exceptions kvminjectel2exception writes ESREL2 for synchronous exceptions but not for SError. enterexception64 does not write ESRELx for any exception type, so the construct...

EUVD-2026-71503

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESREL2 for injected nested SError exceptions kvminjectel2exception writes ESREL2 for synchronous exceptions but not for SError. enterexception64 does not write ESRELx for any exception type, so the construct...

CVE-2026-80873

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESREL2 for injected nested SError exceptions kvminjectel2exception writes ESREL2 for synchronous exceptions but not for SError. enterexception64 does not write ESRELx for any exception type, so the construct...

CVE-2026-80873

This Linux kernel bug affects KVM arm64 nested virtualization . The root cause is that kvm_inject_el2_exception() writes the ESR_EL2 syndrome register for synchronous exceptions but not for SError exceptions, and enter_exception64() does not write ESR_ELx for any exception type. As a result, a gu...

CVE-2026-80853

CVE-2026-80853 affects the Linux kernel KVM subsystem on SNP-enabled hosts . When KVM performs {de,en}crypt operations for an SEV or SEV-ES guest, it used a sub-page allocation for its temporary buffer. On SNP platforms, pages written by firmware are temporarily transferred to Firmware ownership ...

CVE-2026-80853

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for DE,ENCRYPT ops on SNP-enabled hosts When de,encrypting memory of an SEV or SEV-ES guest on an SNP-enabled host via a temporary buffer, allocate a full 4KiB page for the buffer to ensure the page...

EUVD-2026-71303

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for DE,ENCRYPT ops on SNP-enabled hosts When de,encrypting memory of an SEV or SEV-ES guest on an SNP-enabled host via a temporary buffer, allocate a full 4KiB page for the buffer to ensure the page...

CVE-2026-80853 KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on SNP-enabled hosts

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for DE,ENCRYPT ops on SNP-enabled hosts When de,encrypting memory of an SEV or SEV-ES guest on an SNP-enabled host via a temporary buffer, allocate a full 4KiB page for the buffer to ensure the page...

qemu-t8030

=========== QEMU README QEMU is a generic and open source machine & userspace emulator and virtualizer. QEMU is capable of emulating a complete machine in software without any need for hardware virtualization support. By using dynamic translation, it achieves very good performance. QEMU can also...

The vulnerability of the `mark_page_dirty_in_slot()` function in the `virt/kvm/kvm_main.c` module of the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux operating system allows a malicious actor to trigger a service failure.

The vulnerability of the markpagedirtyinslot function in the virt/kvm/kvmmain.c file of the Kernel-based Virtual Machine KVM subsystem of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause a service...

Linux Distros Unpatched Vulnerability : CVE-2026-80891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Validate AIBV and AISB before pinning guest pages The AIBV holds one bit per MSI-X vector for a given function. The size of the bit vector is...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500248)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500248 advisory. - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974840 CVE-2026-80590 - KVM: x86: Cancel delayed I/O APIC E...

UBUNTU-CVE-2026-80726

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...