PT-2026-43854 · Linux · Linux Kernel

Published 2026-05-27 · Updated 2026-06-04 · CVE-2026-45987

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1

Description In the KVM nSVM component, the nested sync control from vmcb02() function fails to synchronize the int state field, specifically bit 0 (SVM INTERRUPT SHADOW MASK), from vmcb02 to the cached vmcb12 after a VMRUN in guest mode. This occurs because the cached vmcb12 serves as the authoritative copy for certain controls and the payload for saving or restoring nested state. If KVM SET VCPU EVENTS occurs before KVM SET NESTED STATE during the restore path, the interrupt shadow is restored into vmcb01 instead of vmcb02. While this may only cause interrupt delays for L1 guests, it can lead to vCPU hangs for L2 guests, such as when a wakeup interrupt is delivered before a HLT that should have been protected by an interrupt shadow.

Recommendations Update to version 7.0.11-1.1.

Fix

Related Identifiers

CVE-2026-45987

ECHO-21D2-C8D0-E386

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 292

• https://cve.org/CVERecord?id=CVE-2026-45987 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45987 · Security Note
• https://git.kernel.org/stable/c/0c1f74d8b74d8a31751fb6ea5417e48e02c93b58 · Patch
• https://git.kernel.org/stable/c/1709418535a8df95532999d61b03d59975280258 · Patch
• https://git.kernel.org/stable/c/2f950eeb27af6885416232761700b8820cae0a61 · Patch
• https://git.kernel.org/stable/c/e0377e52f3c10ee572732d11b04625b7f517a862 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-45987 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-45987 · Vendor Advisory
• https://git.kernel.org/stable/c/03bee264f8ebfd39e0254c98e112d033a7aa9055 · Patch
• https://git.kernel.org/stable/c/497f6af9679fc9c6ce2f438e11ed5d51b1aa8297 · Patch
• https://ubuntu.com/security/CVE-2026-45987 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-45987 · Vendor Advisory
• https://git.kernel.org/stable/c/e39a77a9b1e17d2d831c304eafac4c41a784a0be · Patch
• https://git.kernel.org/stable/c/4b44aa1a134e499c4517597118378b308602a16c · Patch