CVE Watch19 de out. de 2026

CVE-2026-43133

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80

CVSS

7.9

Alta

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 6 de mai. de 2026 · Última mod.: 19 de out. de 2026 · CWE-754 · CWE-628

EPSS · 30d

0.1%EPSS · 30 dias0.1%

2026-10-082026-11-05

Descrição técnica

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM: always use vmcb01 to for vmsave/vmload of guest state") made KVM always use vmcb01 for the fields controlled by VMSAVE/VMLOAD, but it missed updating the VMLOAD/VMSAVE emulation code to always use vmcb01. As a result, if VMSAVE/VMLOAD is executed by an L2 guest and is not intercepted by L1, KVM will mistakenly use vmcb02. Always use vmcb01 instead of the current VMCB.

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-69066—

3.4%

——1Memory corruption in GPU driver due to improper validation of VMID reservation.2d CVE-2026-69006—

3.4%

——1Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.2d CVE-2026-48186—

3.4%

——1Improper handling of messages before AS security activation can cause unexpected behavior2d CVE-2026-35495—

4.2%

——1In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability2d CVE-2025-66368—

4.2%

——1Incorrect handling of SDP payload leads to a Denial of Service2d CVE-2025-66365—

4.2%

——1Incorrect handling of SIP packets leads to baseband crashes2d