531 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of...
CLEANSTART-2024-DB66793 vCPU context-switch implementation in Xen through 4
Security vulnerability affects the xen package. The vCPU context-switch implementation in Xen through 4...
CVE-2026-99082
A flaw was found in the Linux kernel. In the KVM Kernel-based Virtual Machine subsystem, the per-virtual CPU vCPU memory-mapped I/O MMIO cache does not properly track active memory slots when switching between normal execution and System Management Mode SMM. A privileged guest user can exploit th...
CVE-2026-99082
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per-vCPU MMIO cache KVM tags the per-vCPU MMIO cache with a memslot generation so that a memslot update invalidates cached MMIO information. Both the fill and validation paths use kvmmemslots...
PT-2026-121900
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 implementation where pkvm init features from host handles KVM ARCH FLAG GUEST HAS SVE and KVM ARM VCPU SVE separately. Because pkvm vcpu init sve tests t...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.14. It arises because pkvminitfeaturesfromhost retrieves KVMARCHFLAGGUESTHASSVE and KVMARMVCPUSVE from the host respectively; meanwhile, pkvmvcpuinitsve checks these feature bits while vcpuhassve reads the corresponding flags. As a result,...
SUSE CVE-2026-98465
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration KVM device ioctls are not serialized against KVMRUN. As a result, kvmriscvaiaimsicrwattr can snapshot the physical CPU and HGEI of an IMSIC VS-file before a concurrent...
Linux Distros Unpatched Vulnerability : CVE-2026-98465
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RISC-V: KVM: Serialize IMSIC attributes with vCPU migration KVM device ioctls are not serialized against KVMRUN. As a result, kvmriscvaiaimsicrwattr can snapsho...
Linux Distros Unpatched Vulnerability : CVE-2026-98637
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure pkvmvcpuinitsve clears...
SUSE CVE-2026-98464
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during teardown The non-Sstc hrtimer callback clears nextset before its final uses of the enclosing vCPU. If teardown observes nextset as false while the callback is still running,...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: KVM: Do not emit a WARN if memory becomes dirty without a vCPU when the VM is dying When marking a page as dirty, report that no running/virtual CPU exists only if the VM is still alive—i.e., if its reference count is non-zero...
Astra Linux – vulnerability in linux-6.12, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore -EBUSY when checking nested events from vcpublock The -EBUSY flag is ignored when checking nested events after exiting a blocking state while L2 is active. Exiting to userspace typically results in a spurious...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 After VMRUN in guest mode, nestedsynccontrolfromvmcb02 syncs fields written by the CPU from vmcb02 to the cached vmcb12. This is because the cached vmcb12 is use...
CVE-2026-98464
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during teardown The non-Sstc hrtimer callback clears nextset before its final uses of the enclosing vCPU. If teardown observes nextset as false while the callback is still running,...
AZL-108906 CVE-2026-98465 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration KVM device ioctls are not serialized against KVMRUN. As a result, kvmriscvaiaimsicrwattr can snapshot the physical CPU and HGEI of an IMSIC VS-file before a concurrent...
DEBIAN-CVE-2026-98465
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration KVM device ioctls are not serialized against KVMRUN. As a result, kvmriscvaiaimsicrwattr can snapshot the physical CPU and HGEI of an IMSIC VS-file before a concurrent...
CVE-2026-98465
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration KVM device ioctls are not serialized against KVMRUN. As a result, kvmriscvaiaimsicrwattr can snapshot the physical CPU and HGEI of an IMSIC VS-file before a concurrent...
AZL-109160 CVE-2026-98464 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during teardown The non-Sstc hrtimer callback clears nextset before its final uses of the enclosing vCPU. If teardown observes nextset as false while the callback is still running,...
DEBIAN-CVE-2026-98464
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during teardown The non-Sstc hrtimer callback clears nextset before its final uses of the enclosing vCPU. If teardown observes nextset as false while the callback is still running,...
CVE-2026-98464
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during teardown The non-Sstc hrtimer callback clears nextset before its final uses of the enclosing vCPU. If teardown observes nextset as false while the callback is still running,...