PT-2026-43949 · Linux · Linux Kernel

Sean · CVE-2026-46082 · Published 2026-05-27 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the KVM SVM component, the INVLPGA instruction fails to trigger an invalid opcode exception (#UD) when the EFER.SVME variable is not set. This occurs because the system does not properly check if EFER.SVME equals 0 before executing the instruction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-46082

ECHO-3107-00A4-764B

OPENSUSE-SU-2026:10954-1

SUSE-SU-2026:2914-1

USN-8488-1

USN-8488-2

USN-8489-1

USN-8507-1

Affected Products

Linux Kernel

References · 683

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46082.json · Exploit
• https://ubuntu.com/security/CVE-2026-46085 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31626 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46072 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45987 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52905 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46281 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45996 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45988 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46061 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46038 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31715 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31574 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46036 · Vendor Advisory