CVE-2026-98714
KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 7.2.10
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded Leave control.erap_ctl and control.clean as-is in the VMCS if VMRUN fails, because as per AMD: there's no explicit architectural guarantee about the behavior in the presence of VMRUN failures. So the best thing to do would be to assume that if VMRUN fails, the actions requested in the control fields may not have been performed.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 8d28fec406e4d5ce6c109fe12699976e72e9748e · fixed in 8676b29d186fcb5c1251d8152fc91d19421e5600; From 8d28fec406e4d5ce6c109fe12699976e72e9748e · fixed in e27fc915c8f575ab5630e27d97465c2077d4b9d1
- Linux Linux
2.6.38
- KernelLinux
fixed in 7.2.10