Linux kernel, KVM vulnerabilities
3 known CVE vulnerabilities in Linux kernel, KVM, translated and rated.
- CVE-2026-46113High
A vulnerability in the Linux kernel related to KVM has been fixed, concerning use-after-free in shadow paging. The issue occurred when guest page tables were modified between VM entries, leading to memory management errors.
- CVE-2026-46059Medium
A vulnerability in the Linux kernel has been resolved in KVM regarding the use of NextRIP in vmcb02 after the first L2 VMRUN. The issue occurs when NRIPS is disabled, leading to incorrect NextRIP settings.
- CVE-2026-46014Medium
A vulnerability has been identified in the Linux kernel related to KVM's handling of LBR MSRs, which were not properly saved and restored. This issue has been resolved by adding the appropriate MSRs to the list and allowing writes from userspace when LBR virtualization is enabled.