Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-63937

KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer Use READ_ONCE() when reading entries/indices from the guest-accessible Page State Change buffer to defend against TOCTOU bugs. Don't bother with READ_ONCE()/WRITE_ONCE() for cases where KVM is writing (and not consuming the result!), as the guest isn't supposed to touch the buffer while it's being processed. I.e. using READ_ONCE() is all about protecting against misbehaving guests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9b54e248d2644be71cb394eb85f31ad99e023a05 to < bd232801ef1d1fd985d2d4ca3cd1d888303ca86faffected
  • 9b54e248d2644be71cb394eb85f31ad99e023a05 to < b1dfaa6f7a957726a6800135be3659fbe4bbf2a4affected
  • 9b54e248d2644be71cb394eb85f31ad99e023a05 to < edbbe88f83b524434974e84808d3093199d67c24affected
  • 9b54e248d2644be71cb394eb85f31ad99e023a05 to < c8cc238093ca6c99267032f6cfe78f59389f3157affected

Linux Linux

Default version status: affected

  • 6.11affected
  • 0 to < 6.11unaffected
  • 6.12.93 to ≤ 6.12.*unaffected
  • 6.18.35 to ≤ 6.18.*unaffected
  • 7.0.12 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References