PT-2026-43881 · Linux · Linux Kernel

CVE-2026-46014

·

Published

2026-05-27

·

Updated

2026-07-24

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1
Description In the KVM SVM component, there is a failure in the save and restore handling of Last Branch Record (LBR) Model Specific Registers (MSRs). Specifically, MSR IA32 DEBUGCTLMSR and LBR MSRs are not enumerated by KVM GET MSR INDEX LIST, and LBR MSRs cannot be set via KVM SET MSRS. This results in broken save/restore functionality. The issue also affects VMX, where MSR IA32 DEBUGCTLMSR is not reported as an MSR to be saved or restored.
Recommendations Update to version 7.0.11-1.1.

Exploit

Fix

Improper Locking

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2026-46014
OESA-2026-2869
OESA-2026-3157
OPENSUSE-SU-2026:10954-1
USN-8488-1
USN-8488-2
USN-8489-1
USN-8507-1
USN-8569-1
USN-8603-1

Affected Products

Linux Kernel