SUSE CVE-2026-68454

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores 0 for the guest AISB location instead of...

ROS-20260825-73-0025

The vulnerability of the nestedvmcb02preparecontrol function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a attacker to cau...

The vulnerability of the sev_pin_memory() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to cause a service failure.

The vulnerability of the sevpinmemory function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the eiointc_update_sw_coremap() function in the arch/loongarch/kvm/intc/eiointc.c module of the LoongArch architecture support for the Linux operating system allows a attacker to access protected information or cause a service failure.

The vulnerability of the eiointcupdateswcoremap function in the arch/loongarch/kvm/intc/eiointc.c module of the LoongArch Linux kernel architecture is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected...

The vulnerability of the __kvm_at_swap_desc() function in the arch/arm64/kvm/at.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kvmatswapdesc function in the arch/arm64/kvm/at.c module of the virtualization subsystem on the ARM 64-bit kernel of the Linux operating system is related to errors during pointer scaling. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the kvm_get_vcpu_by_cpuid() function in the arch/loongarch/kvm/vpu.c module, which is part of the LoongArch architecture support for the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kvmgetvcpubycpuid function in the arch/loongarch/kvm/vpu.c module, which is part of the LoongArch architecture support for the Linux operating system, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow ...

The vulnerability of the kvm_eiointc regs_access() function in the arch/loongarch/kvm/intc/eiointc.c module, which is part of the LoongArch architecture support for the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the kvmeiointc regsaccess function in the arch/loongarch/kvm/intc/eiointc.c module of the LoongArch architecture support for the Linux operating system is related to incorrect conversion of numerical value types. Exploiting this vulnerability could allow an attacker to cause ...

AlmaLinux 10 : qemu-kvm (ALSA-2026:58571)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:58571 advisory. qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling CVE-2026-48914 Bug Fixes and Enhancements: qemu-kvm hung during drain after double pause...

The vulnerability of the sev_mem_enc_register_region() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the sevmemencregisterregion function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the sev_es_sync_vmsa() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to cause a service failure.

The vulnerability of the sevessyncvmsa function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

A flaw was found in the Kernel-based Virtual Machine KVM for x86. This vulnerability occurs when KVM incorrectly re-checks Level 1 L1 intercepts during the completion of userspace I/O emulation for a Level 2 L2 instruction. If the L1 or host userspace modifies I/O interception settings during thi...

RLSA-2026:58571 Moderate: qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling...

qemu-kvm security, bug fix, and enhancement update

An update is available for qemu-kvm. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM is a full virtualization solution for Linu...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: removed the spurious WARN message when writing to ZCREL2. It is entirely possible for a guest to write to the ZCREL2 sysreg alias while in a nested context. This is expected if FEATNV2 is advertised to the L1...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Rejects adapter interrupt forwarding if it is already enabled. The MPCIFC instruction does not allow registering adapter interrupts without first unregistering them. Therefore, any request to enable interrupt...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of the PAGEUNUSED page bit The PAGEUNUSED softbit should not actually exist. Its sole purpose is to signal to trytounmapone and trytomigrateone that the page can be discarded instead of being moved or swappe...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86: Cancel the delayed EOI handling of the I/O APIC before destroying vCPUs. Cancel and flush the delayed EOI handling of the I/O APIC during the “pre-VM-destroy” phase, before vCPUs are destroyed. Processing the EOI...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: s390: pci: Fixed a GISC reference count leak when enabling AIF. The kvms390giscregister function registers the guest ISC before pinning the guest interrupt forwarding pages and allocating the AISB bit. If any of the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs. Proper migration requires that additional SNP-specific states, such as...