PT-2026-34945 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-06 · CVE-2026-31593

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM component regarding SEV (Secure Encrypted Virtualization). The system fails to reject attempts to synchronize the vCPU state to its associated VMSA (Virtual Machine Save Area) if the vCPU has already been launched and the VMSA is encrypted. On hosts with SNP (Secure Nested Paging) enabled, accessing this guest-private memory triggers an RMP (Reverse Map Table) page fault, which leads to a host kernel panic. This occurs within the sev es sync vmsa() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31593

OPENSUSE-SU-2026:10703-1

Affected Products

Linux Kernel

References · 77

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31593 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31593 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31593 · Vendor Advisory
• https://git.kernel.org/stable/c/6ef109e01e1d35199e1a97ea68bdfd3cf3fbf9ab · Patch
• https://git.kernel.org/stable/c/8f85a4885eee8cb495961ffa371a91828afb9445 · Patch
• https://git.kernel.org/stable/c/692fdf05e55fa03960a1278afdc2478c12daea13 · Patch
• https://git.kernel.org/stable/c/9b9f7962e3e879d12da2bf47e02a24ec51690e3d · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31593 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10703-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31593 · Security Note
• https://git.kernel.org/stable/c/c9609847ae65ca36233077c2b6cb2bc0fb37c77a · Patch
• https://ubuntu.com/security/CVE-2026-31593 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31593 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-31584 · Note
• https://suse.com/security/cve/CVE-2026-31574 · Note