CVE-2026-31591
MediumSummary
In the Linux kernel, a vulnerability in KVM for AMD SEV-SNP was found. During SNP launch finish, the synchronization and encryption of VMSA (Virtual Machine Save Area) does not lock all vCPUs, allowing userspace to manipulate or run a vCPU while its state is being synchronized.
Risk Assessment
The risk involves potential integrity violation of the virtual machine state through unauthorized VMSA modification, which could lead to privilege escalation or data leakage in cloud environments.
Recommendation
Immediately update the Linux kernel to a version containing the fix that locks all vCPUs during VMSA synchronization for SNP.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish Lock all vCPUs when synchronizing and encrypting VMSAs for SNP guests, as allowing userspace to manipulate and/or run a vCPU while its state is being synchroni