cve 2026-46131

CVE-2026-46131 is a Linux kernel KVM vulnerability disclosed in May 2026, involving incorrect handling of nested Intel EPT and AMD NPT state during slow Hyper-V TLB flush hypercalls on x86 hosts. While not a Windows flaw, it affects environments where Windows and Linux virtualization intersect, such as KVM hosts running Windows workloads with Hyper-V enlightenment paths and nested guests. The fix is a one-line kernel patch that corrects which address space the hypervisor reads. This tag covers discussions about the vulnerability's impact on nested virtualization, Hyper-V TLB flush behavior, and the practical implications for administrators managing mixed Windows-Linux virtualized infrastructure.