CVE-2026-64247

CVE-2026-64247 affects the Linux kernel KVM code for x86 hyper-v, where VP IDs are checked against a sparse-bank set. The issue arises when handling a paravirtual TLB flush for L2: the VP ID can be copied from the enlightened VMCS without bounds checking, potentially exceeding the allowed 64 bank...

EUVD-2026-48656

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when querying sparse banks When checking if a VP ID is included in a sparse bank set, explicitly check that the ID can actually be contained in a sparse bank the TLFS allows for a maximum o...