CVE-2026-43315
MediumSummary
A vulnerability in the Linux kernel has been resolved that allowed a user-triggerable WARN in the nested_svm_load_cr3() function. The WARN has been removed from the svm_set_nested_state() function on failure of loading, as it can be trivially triggered from userspace by modifying CPUID after load.
Risk Assessment
This vulnerability could lead to unintended warnings in the system, potentially affecting the stability and security of virtualization operations. Allowing users to trigger such warnings may result in unpredictable system behavior.
Recommendation
It is recommended to update the Linux kernel to the latest version to eliminate this vulnerability and improve system stability in the context of virtualization.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding Drop the WARN in svm_set_nested_state() on nested_svm_load_cr3() failing as it is trivially easy to trigger from userspace by modifying CPUID after load