KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (Linux Linux)

CVE-2026-89931
Not available

At a glance

Source
NVD
EPSS
EPSS 0.21 % · percentile 11 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Received

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit Always check and clear KVM_REQ_GET_NESTED_STATE_PAGES when emulating a nested VM-Exit to ensure the request is cleared, even when KVM was built with CONFIG_KVM_HYPERV=n, as KVM subtly relies on the "check" to clear the flag and thus avoid double-mapping the vmcs12 pages, e.g. if KVM manages to bail from VM-Enter without processing the request, and then emulates VMLAUNCH or VMRESUME.

References

European references

CERT-FR advisories

Affected products

ProductVersions
Linux · Linuxaffected b4f69df0f65e97fec439130a0d0a8b9c7cc02df2 < ae190f2439ca30067927077bf570d4c5edf07a0f ; affected b4f69df0f65e97fec439130a0d0a8b9c7cc02df2 < 674a3244f07f323f21a106a7bdcaebb6db6a5058 ; affected b4f69df0f65e97fec439130a0d0a8b9c7cc02df2 < bbec4adc2f340d85f4a77a9ddcddaa6b1f4639c5 ; affected b4f69df0f65e97fec439130a0d0a8b9c7cc02df2 < 11722439fb206c88e6f31be54173efa9880b4ccb
Linux · Linuxaffected 6.8 ; unaffected 0 < 6.8 ; unaffected 6.12.110 ≤ 6.12.* ; unaffected 6.18.51 ≤ 6.18.* ; unaffected 7.2.5 ≤ 7.2.* ; unaffected 7.3 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD