Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-89931

KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit Always check and clear KVM_REQ_GET_NESTED_STATE_PAGES when emulating a nested VM-Exit to ensure the request is cleared, even when KVM was built with CONFIG_KVM_HYPERV=n, as KVM subtly relies on the "check" to clear the flag and thus avoid double-mapping the vmcs12 pages, e.g. if KVM manages to bail from VM-Enter without processing the request, and then emulates VMLAUNCH or VMRESUME.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b4f69df0f65e97fec439130a0d0a8b9c7cc02df2 to < ae190f2439ca30067927077bf570d4c5edf07a0faffected
  • b4f69df0f65e97fec439130a0d0a8b9c7cc02df2 to < 674a3244f07f323f21a106a7bdcaebb6db6a5058affected
  • b4f69df0f65e97fec439130a0d0a8b9c7cc02df2 to < bbec4adc2f340d85f4a77a9ddcddaa6b1f4639c5affected
  • b4f69df0f65e97fec439130a0d0a8b9c7cc02df2 to < 11722439fb206c88e6f31be54173efa9880b4ccbaffected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.51 to ≤ 6.18.*unaffected
  • 7.2.5 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References