PT-2026-43926 · Linux · Linux Kernel
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
In the KVM nSVM component, an issue exists where the current RIP (Instruction Pointer) is incorrectly used as the NextRIP in
vmcb02 after the first L2 VMRUN. For guests with NRIPS disabled, L1 does not provide NextRIP when running an L2 with an injected soft interrupt, leading KVM to use the current RIP to emulate a CPU without NRIPS. After the initial L2 run, the CPU or KVM updates NextRIP, making the current RIP an incorrect value for vmcb02. This logic also affects the soft int next rip function.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel