linux kvm

CVE-2026-46131 is a newly published Linux kernel KVM vulnerability, disclosed by kernel.org and recorded by NVD on May 28, 2026, involving incorrect handling of nested Intel EPT and AMD NPT state during slow Hyper-V TLB flush hypercalls on x86 hosts. The bug is not a Windows flaw, but it lives...

CVE-2026-46076 is a newly published Linux kernel KVM vulnerability, disclosed by kernel.org and recorded by NVD on May 27, 2026, that fixes incorrect AMD nested-virtualization handling of VMMCALL instructions when a second-level guest runs under an L1 hypervisor. The bug is narrow, technical...

CVE-2026-46082 is a newly published Linux kernel KVM vulnerability, disclosed by kernel.org and listed by NVD on May 27, 2026, that fixes AMD SVM emulation so INVLPGA correctly raises an invalid-opcode exception when EFER.SVME is disabled. That is a mouthful, but the practical story is simpler...

CVE-2026-46014 is a Linux kernel KVM vulnerability published by NVD on May 27, 2026, covering broken save-and-restore handling for Last Branch Record model-specific registers in KVM’s AMD SVM virtualization path, with related Intel VMX bookkeeping also corrected. The bug is not the kind of flaw...

CVE-2026-46059 is a newly published Linux kernel KVM vulnerability, received by NVD on May 27, 2026, affecting AMD nested virtualization logic in nSVM when KVM restores an L2 guest after its first VMRUN. It is not yet scored by NVD, and the public record still sits in the frustrating “awaiting...

CVE-2026-31591: Linux KVM SEV-SNP vCPU Locking Flaw Can Corrupt Guest State or Crash the Host CVE-2026-31591 is a Linux kernel vulnerability in KVM’s AMD SEV-SNP launch path. The issue affects the way KVM synchronizes Virtual Machine Save Areas, or VMSAs, when finalizing the launch of an SEV-SNP...

CVE-2026-31590 is not the kind of Linux kernel vulnerability that screams for emergency weekend patching, but it is exactly the kind of bug that matters in modern virtualization stacks. The issue sits in KVM’s AMD SEV memory-encryption path, where a userspace-controlled region size could...