PT-2026-43938 · Linux · Linux Kernel

Published 2026-05-27 · Updated 2026-05-28 · CVE-2026-46071

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM nSVM component where the svm copy lbrs() function always marks VMCB LBR as dirty in the destination VMCB. Because nested svm vmexit() uses this to copy Last Branch Records (LBRs) to vmcb12, it results in clearing clean bits in vmcb12, an action that is not architecturally defined.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-46071

Affected Products

Linux Kernel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-46071 · Security Note
• https://git.kernel.org/stable/c/b53ab5167a81537777ac780bbd93d32613aa3bda · Note
• https://twitter.com/windowsforum/status/2059937241464516615 · Twitter Post
• https://git.kernel.org/stable/c/a3f0981a5a0e0bd51ad74cc7d9eed32294b24002 · Note
• https://git.kernel.org/stable/c/9efe23568806d1cd06f7d146f9b3037b8d585a9f · Note