CVE-2026-46082
KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 INVLPGA should cause a #UD when EFER.SVME is not set. Add a check to properly inject #UD when EFER.SVME=0. [sean: tag for stable@]
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
2.6.32
References 7
git.kernel.org
- stable/c/ebb63390142c6458fc37758e0892759989cc159f
- stable/c/491139c17f8ad5773303068411f6ac5eed438b51
- stable/c/3ac9d4241d205f5d0df06358349ca718ebb0fa12
- stable/c/643125b66ffc1147c66616b749475ba9efb15971
- stable/c/c15392ed9e49c1a16b4d3a3ccf1b3bf2318a6c28
- stable/c/ee24928ecd85db4b68ed111e91fef36af0ca37b0
- stable/c/d99df02ff427f461102230f9c5b90a6c64ee8e23