DEBIAN-CVE-2026-98283

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix use-after-free in kvmhvemulatetlbiealllpid kvmhvemulatetlbiealllpid iterates the nested-guest IDR and drops mmulock before calling kvmhvemulatetlbielpid, but does not hold a reference on the kvmnestedgues...

CVE-2026-89923

A flaw was found in KVM s390. A memory leak occurs in the Kernel-based Virtual Machine KVM for s390 architecture when a virtual CPU vCPU is destroyed while hardware breakpoints are still active, as the associated debug data is not properly freed. A local attacker or a malicious guest operating...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before initialization Another syzkaller bug. KVM incorrectly allows the user space to pend vCPU events for a vCPU that has not yet been initialized. This leads to KVM interpreting a bunch...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore -EBUSY when checking nested events from vcpublock Ignore -EBUSY when checking nested events after exiting a blocking state. This applies when L2 is active; exiting to userspace will typically result in a spurious...

SUSE CVE-2026-89923

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Free guest debug data on vcpu destroy kvms390clearbpdata is only called from kvmarchvcpuioctlsetguestdebug, i.e. when user space changes or disables debugging. A vCPU that is destroyed while hardware breakpoints are...

CVE-2026-89923

This is a memory leak in the Linux kernel's KVM s390 module. When a vCPU is destroyed while hardware breakpoints remain armed (the normal case when a VMM exits or crashes), hw_bp_info, hw_wp_info, and old_data buffers are leaked because kvm_s390_clear_bp_data() is only invoked from the guest-debu...

CVE-2026-89923 KVM: s390: Free guest debug data on vcpu destroy

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Free guest debug data on vcpu destroy kvms390clearbpdata is only called from kvmarchvcpuioctlsetguestdebug, i.e. when user space changes or disables debugging. A vCPU that is destroyed while hardware breakpoints are...

PT-2026-93564

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM s390 architecture where guest debug data is not properly freed when a vCPU is destroyed. The function kvm s390 clear bp data is only triggered when user space...

CVE-2026-89923: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Free guest debug data on vcpu destroy kvms390clearbpdata is only called from kvmarchvcpuioctlsetguestdebug, i.e. when user space changes or disables debugging. A vCPU that is destroyed while hardware breakpoints are...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Load DR6 with the guest value only before entering the .vcpurun loop. Move the conditional loading of hardware DR6 with the guest’s DR6 value out of the core .vcpurun loop to fix a bug where KVM may load hardware with a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: Always flush the async PF workqueue when a vCPU is being destroyed. Whenever a vCPU clears its completion queue, i.e., when a VM and all its vCPUs are being destroyed, the async PF workqueue must always be flushed. KVM must...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86: Fixed a stack-out-of-bounds memory access from ioapicwriteindirect. KASAN reports the following issue: BUG: In kvmmakevcpusrequestmask+0x174/0x440 kvm, there is a stack-out-of-bounds situation. A read of size 8 at...

The vulnerability of the kvm_arch_vcpu_create() function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the ARM 64-bit kernel-based Linux operating system allows a hacker to cause a service failure.

The vulnerability of the kvmarchvcpucreate function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the ARM 64-bit kernel-based Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allo...

kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU

A flaw was found in the Kernel-based Virtual Machine KVM component of the Linux kernel on ARM64 systems. A highly privileged local attacker could exploit a vulnerability where the system fails to properly restrict memory access during a specific virtual machine operation. This could allow the...

kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU

A flaw was found in the Kernel-based Virtual Machine KVM component of the Linux kernel on ARM64 systems. A highly privileged local attacker could exploit a vulnerability where the system fails to properly restrict memory access during a specific virtual machine operation. This could allow the...

SUSE CVE-2026-72284

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending PV EOI" request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001482)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001482 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: Always flush async PF workqueue when vCPU is being destroyed Always flush the per-vCPU asyn...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098682)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098682 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvmarchvcpucreate fails to share the vCPU...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86: Cancel the delayed EOI handling of the I/O APIC before destroying vCPUs. Cancel and flush the delayed EOI handling of the I/O APIC during the “pre-VM-destroy” phase, before vCPUs are destroyed. Processing the EOI...

CVE-2026-74517

A flaw was found in KVM Kernel-based Virtual Machine. This vulnerability occurs when the system attempts to process a delayed I/O APIC End-of-Interrupt EOI after the associated virtual CPUs vCPUs have been destroyed. This timing issue results in a Use-After-Free UAF condition, where the system...