CVE-2026-64308

A flaw was found in the Linux kernel's crypto: ccp module, which handles AMD Secure Encrypted Virtualization SEV and Secure Nested Paging SNP features. A local user, by sending specific commands through the /dev/sev interface, could exploit improper initialization handling. If SEV initialization...

CVE-2026-64309

A flaw was found in the Linux kernel's crypto: ccp module. This vulnerability arises from improper initialization of Secure Nested Paging SNP when handling the ioctlSNPCOMMIT command. A local userspace process can exploit this by sending specific commands via /dev/sev ioctls. If Secure Encrypted...

CVE-2026-64285

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component, specifically within the Secure Nested Paging SNP guest functionality. When KVM populates a guest's CPUID Central Processor Unit Identifier data, it may attempt to write to a source memory page that is intended to b...

SUSE CVE-2026-64307

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCONFIG Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...

SUSE CVE-2026-64310

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for SEV ioctls Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and zero o...

CVE-2026-64309

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCOMMIT Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...

CVE-2026-64310

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for SEV ioctls Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and zero o...

CVE-2026-64309

The CVE-2026-64309 entry concerns the Linux kernel crypto/ccp path where SNP_COMMIT initialization was inappropriately performed. The remediation implemented is to skip initializing SNP_COMMIT when the SEV-SNP firmware is uninitialized, i.e., the SNP_COMMIT command is allowed in UNINIT but previo...

CVE-2026-64307

Summary: CVE-2026-64307 relates to the Linux kernel crypto/ccp path, where SNP initialization for ioctl SNP_CONFIG is now not performed. The public descriptions describe an ABI-change and a fix in the SNP initialization path, with discussion about preventing re-init after a failed SNP init, and p...

CVE-2026-64307 crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCONFIG Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...

CVE-2026-64285 KVM: SEV: Pin source page for write when adding CPUID data for SNP guest

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...

CVE-2026-64285

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...

CVE-2026-64285

CVE-2026-64285 affects the Linux kernel KVM SNP guest activity. When populating a guest_memfd’s initial CPUID data, KVM may pin the source page as writable, because KVM writes back CPUID information if userspace data is rejected by trusted firmware. Because the page is accessed via a kernel mappi...

PT-2026-64528

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNP CONFIG Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEV PDH GEN and...

CVE-2026-53360

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem, specifically within the SEV Secure Encrypted Virtualization feature. A malicious guest operating system utilizing SEV-SNP Secure Nested Paging can exploit an out-of-bounds write vulnerability due to improper...

KVM: x86: check for nEPT/nNPT in slow flush hypercalls

...

CVE-2026-46131

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: check for nEPT/nNPT in slow flush hypercalls Checking isguestmodevcpu is incorrect, because translatenestedgpa is only valid if an L2 guest is running with nested EPT/NPT enabled. Instead use the same condition as...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV – Lock all vCPUs when synchronizing VMSAs for SNP launches to complete. Lock all vCPUs when synchronizing and encrypting VMSAs for SNP guests. Allowing the user space to manipulate or run a vCPU while its state is being...

EUVD-2025-209811

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity...

Insecure Despite Proven Updated: Extracting the Root VCEK Seed on EPYC Milan Via a Software-Only Attack

In the official whitepaper of Secure Encrypted Virtualization with Secure Nested Paging SEV-SNP, AMD explicitly emphasizes the capability to prevent Trusted Computing Base TCB rollback attacks. Cryptographically, this is realized by signing attestation reports with the Versioned Chip Endorsement...