Skip to content
CVE PROGRAM SOURCE RECORD7.9 High

CVE-2026-43133

KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM: always use vmcb01 to for vmsave/vmload of guest state") made KVM always use vmcb01 for the fields controlled by VMSAVE/VMLOAD, but it missed updating the VMLOAD/VMSAVE emulation code to always use vmcb01. As a result, if VMSAVE/VMLOAD is executed by an L2 guest and is not intercepted by L1, KVM will mistakenly use vmcb02. Always use vmcb01 instead of the current VMCB.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cc3ed80ae69f454c3d904af9f65394a540099723 to < 10063e1251c1485034a018236080792ad083dcc5affected
  • cc3ed80ae69f454c3d904af9f65394a540099723 to < c3b7015000988ba35ecd5648f4b2283960f00543affected
  • cc3ed80ae69f454c3d904af9f65394a540099723 to < 3880e331b0b31d0d5d3702b124f6c93539cd478aaffected
  • cc3ed80ae69f454c3d904af9f65394a540099723 to < fce2fd4a2ca05670a91015aacccf96a1c26268fdaffected
  • cc3ed80ae69f454c3d904af9f65394a540099723 to < d464cf1ed900d47c85393d40b00017b6adfc2e6caffected
  • cc3ed80ae69f454c3d904af9f65394a540099723 to < 0004ecb798b30e90d7ebfe74efae2d9423315a64affected
  • cc3ed80ae69f454c3d904af9f65394a540099723 to < 127ccae2c185f62e6ecb4bf24f9cb307e9b9c619affected

Linux Linux

Default version status: affected

  • 5.13affected
  • 0 to < 5.13unaffected
  • 5.15.202 to ≤ 5.15.*unaffected
  • 6.1.165 to ≤ 6.1.*unaffected
  • 6.6.128 to ≤ 6.6.*unaffected
  • 6.12.75 to ≤ 6.12.*unaffected
  • 6.18.16 to ≤ 6.18.*unaffected
  • 6.19.6 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References