CVE-2026-68093

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine. When a virtual CPU vCPU is scheduled out and its physical CPU pCPU undergoes a hotplug cycle offline and then online, the vCPU might resume with an Address Space Identifier ASID that has been reassigned to another vCPU from ...

CVE-2026-68428

A flaw was found in the KVM Kernel-based Virtual Machine component of the Linux kernel. A local attacker with privileges to load and unload kernel modules could exploit a use-after-free vulnerability. This occurs when a vendor module is unloaded while the KVM module remains loaded, and a subseque...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500162)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500162 advisory. - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832946 CVE-2026-64561 - x86/bugs: Make...

The vulnerability of the Shadow MMU management mechanism for page-level shadow tables in the KVM subsystem of the Linux operating system allows a perpetrator to escalate their privileges, execute arbitrary code, or cause service interruptions.

The vulnerability of the Shadow MMU management mechanism for virtual machine tables in Linux kernel-based virtual machines is related to the dereferencing of pointers with expired lifetimes. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, o...

CVE-2026-68428

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmudestroycaches destroys ptelistdesccache and mmupageheadercache, but leaves both pointers unchanged. The pointers live in kvm.ko, and therefore survive when a vendor modu...

UBUNTU-CVE-2026-68428

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmudestroycaches destroys ptelistdesccache and mmupageheadercache, but leaves both pointers unchanged. The pointers live in kvm.ko, and therefore survive when a vendor modu...

CVE-2026-68428

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmudestroycaches destroys ptelistdesccache and mmupageheadercache, but leaves both pointers unchanged. The pointers live in kvm.ko, and therefore survive when a vendor modu...

CVE-2026-68093

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Bump asidgeneration on CPU online to avoid ASID collision after hotplug If a vCPU stays scheduled out or blocked while the last pCPU it ran on goes through a hotplug cycle online-offline-online, and the vCPU then resume...

UBUNTU-CVE-2026-68093

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Bump asidgeneration on CPU online to avoid ASID collision after hotplug If a vCPU stays scheduled out or blocked while the last pCPU it ran on goes through a hotplug cycle online-offline-online, and the vCPU then resume...

CVE-2026-68428 KVM: x86/mmu: Fix use-after-free on vendor module reload

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmudestroycaches destroys ptelistdesccache and mmupageheadercache, but leaves both pointers unchanged. The pointers live in kvm.ko, and therefore survive when a vendor modu...

CVE-2026-68093 KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Bump asidgeneration on CPU online to avoid ASID collision after hotplug If a vCPU stays scheduled out or blocked while the last pCPU it ran on goes through a hotplug cycle online-offline-online, and the vCPU then resume...

Linux Distros Unpatched Vulnerability : CVE-2026-68428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86/mmu: Fix use-after-free on vendor module reload mmudestroycaches destroys ptelistdesccache and mmupageheadercache, but leaves both pointers unchanged...

Linux Distros Unpatched Vulnerability : CVE-2026-6426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the...

MiracleLinux 9 : qemu-kvm-10.1.0-17.el9_8.4.ML.1 (AXSA:2026-1505:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1505:04 advisory. qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling CVE-2026-48914 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-68093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SVM: Bump asidgeneration on CPU online to avoid ASID collision after hotplug If a vCPU stays scheduled out or blocked while the last pCPU it ran on goes...

AZL-94640 CVE-2026-68081 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path...

CVE-2026-68081

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path...

UBUNTU-CVE-2026-68081

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path...

Unbreakable Enterprise kernel security update

6.12.0-205.92.4.2 - net: tap: set skb-dev before parsing virtio net header in tapgetuserxdp Dongli Zhang Orabug: 39844842 - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39844812 CVE-2026-68480 - KVM: x86: Check for invalid/obsolete root after making MMU...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-3071)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bridge: brndsend: linearize skb before parsing ND optionsCVE-2026-31682 media: mc, v4l2: serialize REINIT and REQBUFS with...