CVE-2026-64562

CVE-2026-64562 affects the Linux kernel KVM nVMX feature. The issue arises when freeing the shadow VMCS: free_nested() frees the shadow VMCS while vmcs01 still points to it, which is asynchronous with respect to loaded_vmcs_clear(). As a result, a vCPU may migrate before the pointer is cleared, a...