PULSE
LIVE34signals / 24h
FEED
ransomchaos reclama a remco.ca · CA · Otherransomqilin reclama a Contacto Garantido · MX · Professional Servicesransomqilin reclama a Universitatea de Vest „Vasile Goldiș” din Arad · RO · Educationransomm3rx reclama a hydraulic-components.net · DE · Manufacturingransomm3rx reclama a createinfor.pt · PT · Professional Servicesransomm3rx reclama a servicebypremier.com · US · Professional Servicesransomexfilsquad reclama a Analog Devices · US · Technologyransomexfilsquad reclama a Bonava · SE · Manufacturingransomexfilsquad reclama a City of Atlanta · US · Government & Defenseransomexfilsquad reclama a City of Houston · US · Government & Defenseransomexfilsquad reclama a Viavi Solutions · US · Technologyransomexfilsquad reclama a Newcastle University · GB · Educationransomexfilsquad reclama a District of Columbia Public Schools · US · Educationransomexfilsquad reclama a Zenith Bank Plc · NG · Financial Servicesransomchaos reclama a remco.ca · CA · Otherransomqilin reclama a Contacto Garantido · MX · Professional Servicesransomqilin reclama a Universitatea de Vest „Vasile Goldiș” din Arad · RO · Educationransomm3rx reclama a hydraulic-components.net · DE · Manufacturingransomm3rx reclama a createinfor.pt · PT · Professional Servicesransomm3rx reclama a servicebypremier.com · US · Professional Servicesransomexfilsquad reclama a Analog Devices · US · Technologyransomexfilsquad reclama a Bonava · SE · Manufacturingransomexfilsquad reclama a City of Atlanta · US · Government & Defenseransomexfilsquad reclama a City of Houston · US · Government & Defenseransomexfilsquad reclama a Viavi Solutions · US · Technologyransomexfilsquad reclama a Newcastle University · GB · Educationransomexfilsquad reclama a District of Columbia Public Schools · US · Educationransomexfilsquad reclama a Zenith Bank Plc · NG · Financial Services
← All CVEs
CVE WatchJul 20, 2026

CVE-2026-64172

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum

CVSS

7.1

High

EPSS

0.1%

p3

KEV

Exploit Today

1

0-100

Published: Jul 19, 2026 · Last modified: Jul 20, 2026

EPSS · 30d
0.1%EPSS · 30 days0.2%
2026-07-202026-07-25
Technical description

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235) Hygon Family 18h CPUs are derived from AMD Family 17h (Zen1) silicon and share the same erratum #1235: hardware may read a stale IsRunning=1 bit during ICR write emulation and silently fail to generate an AVIC_IPI_FAILURE_TARGET_NOT_RUNNING VM-Exit on the sending vCPU. The absence of the VM-Exit causes KVM to miss the required wakeup of blocking target vCPUs, leading to hung vCPUs and unbounded delays in guest execution. Extend the existing AMD Family 17h erratum #1235 workaround to also cover Hygon Family 18h. With IPI virtualization disabled, KVM never sets IsRunning=1 in the Physical ID table, so every non-self IPI generates a VM-Exit and is correctly emulated.

Official references
Related CVEs

No related CVEs by CWE or product.