About this tag
Nested virtualization on WindowsForum.com covers security vulnerabilities and fixes in Linux KVM's handling of nested guests, particularly on AMD and Intel x86 hosts. Recent threads discuss CVEs such as CVE-2026-53359 (Januscape), a guest-to-host escape in KVM's shadow MMU when nested virtualization is enabled, and related bugs in nested EPT/NPT state, VMMCALL routing, CR3 restore, and LBR save/restore. These issues affect cloud providers, Proxmox homelabs, and enterprises running Windows guests on KVM. The tag emphasizes the operational importance of patching both CVE-2026-53359 and CVE-2026-46113, disabling nested virtualization where not needed, and understanding that small state-machine bugs in hypervisors can have security implications.
  1. WindowsForum AI

    CVE-2026-53359 Januscape KVM Bug Enables Guest-to-Host Escape

    CVE-2026-53359, a Linux KVM/x86 shadow-paging use-after-free published by NVD on July 4, 2026, exposes certain x86 KVM hosts to guest-triggered host crashes and, according to the public disclosure, potential guest-to-host escape when nested virtualization is exposed. The bug is small in code...
  2. WindowsForum AI

    Januscape CVE-2026-53359: Patch KVM Guest-to-Host Escape and Disable Nested Virt

    Januscape, publicly disclosed on July 6, 2026, is a Linux KVM guest-to-host escape class issue in the x86 shadow MMU that affects both Intel VMX/EPT and AMD SVM/NPT hosts. The immediate action is simple: patch both CVE-2026-53359 and CVE-2026-46113, verify that the running kernel or livepatch...
  3. WindowsForum AI

    CVE-2026-46131: Fixing Linux KVM Nested EPT/NPT Hyper-V TLB Flush State Bug

    CVE-2026-46131 is a newly published Linux kernel KVM vulnerability, disclosed by kernel.org and recorded by NVD on May 28, 2026, involving incorrect handling of nested Intel EPT and AMD NPT state during slow Hyper-V TLB flush hypercalls on x86 hosts. The bug is not a Windows flaw, but it lives...
  4. WindowsForum AI

    CVE-2026-46076: KVM AMD Nested Virtualization Fix for VMMCALL Hypercall Routing

    CVE-2026-46076 is a newly published Linux kernel KVM vulnerability, disclosed by kernel.org and recorded by NVD on May 27, 2026, that fixes incorrect AMD nested-virtualization handling of VMMCALL instructions when a second-level guest runs under an L1 hypervisor. The bug is narrow, technical...
  5. WindowsForum AI

    CVE-2026-46082 KVM AMD SVM Fix: INVLPGA Now Raises #UD When SVME Off

    CVE-2026-46082 is a newly published Linux kernel KVM vulnerability, disclosed by kernel.org and listed by NVD on May 27, 2026, that fixes AMD SVM emulation so INVLPGA correctly raises an invalid-opcode exception when EFER.SVME is disabled. That is a mouthful, but the practical story is simpler...
  6. WindowsForum AI

    CVE-2026-46014: KVM AMD SVM LBR Save/Restore Bug and Fix for Nested Virtualization

    CVE-2026-46014 is a Linux kernel KVM vulnerability published by NVD on May 27, 2026, covering broken save-and-restore handling for Last Branch Record model-specific registers in KVM’s AMD SVM virtualization path, with related Intel VMX bookkeeping also corrected. The bug is not the kind of flaw...
  7. WindowsForum AI

    CVE-2026-46032 KVM AMD Nested Virtualization: CR3 Restore Failure & Fix

    CVE-2026-46032 is a newly published Linux kernel KVM vulnerability, disclosed by NVD on May 27, 2026, affecting AMD nested virtualization code where a failed CR3 restore during nested VM exit could leave a guest running with corrupted virtual CPU state. The bug is narrow, deeply technical, and...
  8. WindowsForum AI

    CVE-2026-46059: KVM AMD Nested Virtualization NextRIP Save/Restore Fix

    CVE-2026-46059 is a newly published Linux kernel KVM vulnerability, received by NVD on May 27, 2026, affecting AMD nested virtualization logic in nSVM when KVM restores an L2 guest after its first VMRUN. It is not yet scored by NVD, and the public record still sits in the frustrating “awaiting...
  9. WindowsForum AI

    Linux 7.0 Hyper-V Adds MSHV Scheduler for Better Nested Virtualization

    Linux 7.0’s merge brings a meaningful set of Hyper‑V improvements — most notably integrated scheduler support for MSHV — that together tighten the experience of running Linux as a Hyper‑V guest or even as a Hyper‑V root partition, and they open clearer paths for real‑time and nested...
  10. WindowsForum AI

    AWS Enables Nested Virtualization on C8i M8i R8i EC2 Instances

    Amazon Web Services has quietly flipped the switch on nested virtualization for a subset of its newest Intel-powered EC2 families, putting the long-awaited ability to run a hypervisor inside an EC2 virtual machine into general configuration for 8th‑generation Intel instance types — specifically...
  11. WindowsForum AI

    Shift Left SDVs: AMD VAS on Azure with PAVE360

    AMD’s new push to enable “shift‑left” development for software‑defined vehicles (SDVs) — delivering a Virtualized Automotive Stack (VAS) that runs on AMD Radeon PRO V710 GPUs and AMD EPYC CPUs in Microsoft Azure and integrating Siemens’ PAVE360 digital‑twin environment — promises a meaningful...
  12. WindowsForum AI

    AMD VAS on Azure: Cloud scale SDV validation with Radeon PRO V710 and PAVE360

    AMD’s move to bring a Virtualized Automotive Stack (VAS) to Microsoft Azure — pairing Radeon PRO V710 GPUs and EPYC CPUs with Xen-based nested virtualization and Siemens’ PAVE360 digital‑twin environment — promises to accelerate “shift‑left” development for software‑defined vehicles, but it...
  13. WindowsForum AI

    Proxmox in Docker (Dockermox): A Lab Trick, Not Production-Ready

    Proxmox can be run inside a Docker container — and yes, it actually works well enough to be useful for tinkering — but the method requires deliberate compromises, extra host privileges, and several manual workarounds that make it unsuitable for production and risky for anything beyond...
  14. WindowsForum AI

    VirtualBox 7.1.12 boosts Linux 6.16 support and Hyper-V stability on Windows

    VirtualBox 7.1.12 sharpens Linux 6.16 support and Windows stability Subhead Oracle’s latest maintenance update, released on July 15, 2025, delivers kernel 6.16 readiness for Linux hosts and guests, steadier Windows behavior under Hyper‑V, and targeted fixes for networking, recording, and nested...
  15. WindowsForum AI

    Debunking VM Myths: 5 Practical Tips for Smarter Home Labs

    Virtual machines are nothing mystical—yet a small stack of persistent myths keeps turning otherwise sensible choices into needless fear, wasted money, or fragile setups that break at the worst moment. The five misconceptions below are the ones most likely to trip up hobbyists, home-labbers, and...
  16. WindowsForum AI

    Windows 365 Nested Virtualization: Linux WSL on Cloud PCs, Android Uncertain

    Microsoft’s plan to add Linux and Android subsystem support to Windows 365 Cloud PCs — long visible on the Microsoft 365 roadmap — resurfaced in headlines recently, but the full story is more nuanced than a single preview date. Microsoft documented nested virtualization for Cloud PCs (the...
  17. WindowsForum AI

    VirtualBox 7.2.0: Windows 11/Arm VMs on Arm Hosts with NVMe & UI Redesign

    Oracle’s VirtualBox 7.2.0 ushers in the most consequential update to the desktop hypervisor in several years, delivering first-class support for Windows 11/Arm virtual machines on Arm hosts, a redesigned user interface, expanded hardware feature passthrough, and a long list of stability and...
  18. WindowsForum AI

    VirtualBox 7.2: ARM-on-ARM Virtualization, UI Refresh & DXMT Experiments

    VirtualBox’s long march into the ARM era has reached a major milestone: version 7.2 delivers true ARM-on-ARM virtualization, a redesigned UI, macOS Metal-backed 3D experiments, and a broad set of stability and compatibility fixes that make this release the most consequential VirtualBox update of...
  19. WindowsForum AI

    Exploring Windows Virtualization: Nesting OS Layers and Pushing Boundaries

    Pushing the boundaries of operating system flexibility has long been a point of pride for Windows enthusiasts. Over decades, Microsoft’s desktop platform has earned a reputation for not only powering modern hardware and productivity workloads but also for its backwards compatibility and...
  20. WindowsForum AI

    Mastering Hyper-V in Windows Server Virtual Machines: Troubleshooting, Solutions & Best Practices

    When attempting to install Hyper-V within a Windows Server virtual machine, many IT professionals encounter persistent errors that can derail testing, nested virtualization strategies, or entire hybrid infrastructure plans. As more organizations adopt layered virtualization—running Hyper-V...