CVE-2026-89932 KVM: nVMX: Always flush vpid02 on first use

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always flush vpid02 on first use Make sure vpid02 is always flushed on first use by setting lastvpid=0 when allocating vpid02. nestedvmxtransitiontlbflush will always detect a VPID change on first VM-Enter after VMXON,...

CVE-2026-89932

CVE-2026-89932 affects the Linux kernel's KVM nested VMX (nVMX) subsystem. The root cause is that the last_vpid variable is not reset to 0 when the L2 VPID (vpid02) is freed on VMXOFF. If KVM subsequently reuses a VPID that still has stale TLB entries on the physical CPU from a previous vCPU or a...