linux kvm

CVE-2026-63794 is a Linux KVM host-kernel issue in AMD SVM/SEV code. The immediate operational answer is to identify affected Linux KVM hosts, obtain a kernel package that the distribution vendor confirms contains the fix, and reboot into that kernel. Windows guest inventories are not the...

CVE-2026-63807 is a Linux KVM x86 flaw in the shadow-MMU hugepage recovery path that can crash the host when a guest’s page-table layout crosses the lower boundary of a KVM memory slot. It affects the Linux kernel that runs KVM, not Windows itself: Windows, Linux, and appliance guests do not...

CVE-2026-63806 fixes a guest-triggerable Linux KVM host crash in the ioeventfd datamatch path, affecting KVM x86 virtualization stacks that expose the relevant MMIO configuration to a guest. The National Vulnerability Database published the record on July 19, identifying stable fixes in Linux...

CVE-2026-53345 is a Linux KVM host-kernel issue, not a Windows guest vulnerability. The change fixes an overbroad KVM warning that can fire while a dying x86 SEV-ES virtual machine is being torn down and guest memory is dirtied without a running vCPU. Admins should identify Linux systems that...

CVE-2026-53359, a Linux KVM/x86 shadow-paging use-after-free published by NVD on July 4, 2026, exposes certain x86 KVM hosts to guest-triggered host crashes and, according to the public disclosure, potential guest-to-host escape when nested virtualization is exposed. The bug is small in code...

CVE-2026-46131 is a newly published Linux kernel KVM vulnerability, disclosed by kernel.org and recorded by NVD on May 28, 2026, involving incorrect handling of nested Intel EPT and AMD NPT state during slow Hyper-V TLB flush hypercalls on x86 hosts. The bug is not a Windows flaw, but it lives...

CVE-2026-46076 is a newly published Linux kernel KVM vulnerability, disclosed by kernel.org and recorded by NVD on May 27, 2026, that fixes incorrect AMD nested-virtualization handling of VMMCALL instructions when a second-level guest runs under an L1 hypervisor. The bug is narrow, technical...

CVE-2026-46082 is a newly published Linux kernel KVM vulnerability, disclosed by kernel.org and listed by NVD on May 27, 2026, that fixes AMD SVM emulation so INVLPGA correctly raises an invalid-opcode exception when EFER.SVME is disabled. That is a mouthful, but the practical story is simpler...

CVE-2026-46014 is a Linux kernel KVM vulnerability published by NVD on May 27, 2026, covering broken save-and-restore handling for Last Branch Record model-specific registers in KVM’s AMD SVM virtualization path, with related Intel VMX bookkeeping also corrected. The bug is not the kind of flaw...

CVE-2026-46059 is a newly published Linux kernel KVM vulnerability, received by NVD on May 27, 2026, affecting AMD nested virtualization logic in nSVM when KVM restores an L2 guest after its first VMRUN. It is not yet scored by NVD, and the public record still sits in the frustrating “awaiting...

CVE-2026-31591: Linux KVM SEV-SNP vCPU Locking Flaw Can Corrupt Guest State or Crash the Host CVE-2026-31591 is a Linux kernel vulnerability in KVM’s AMD SEV-SNP launch path. The issue affects the way KVM synchronizes Virtual Machine Save Areas, or VMSAs, when finalizing the launch of an SEV-SNP...

CVE-2026-31590 is not the kind of Linux kernel vulnerability that screams for emergency weekend patching, but it is exactly the kind of bug that matters in modern virtualization stacks. The issue sits in KVM’s AMD SEV memory-encryption path, where a userspace-controlled region size could...