PT-2026-61489 · Linux · Linux Kernel

CVE-2026-64172 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM SVM implementation for Hygon Family 18h CPUs. Due to a hardware erratum, the system may read a stale IsRunning=1 bit during ICR write emulation. This causes a failure to generate an AVIC IPI FAILURE TARGET NOT RUNNING VM-Exit on the sending vCPU. Consequently, KVM fails to wake up blocking target vCPUs, which can lead to hung vCPUs and unbounded delays in guest execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-64172

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-64172 · Security Note
• https://twitter.com/infoflowcloud/status/2078982166273315078 · Twitter Post
• https://twitter.com/CVEnew/status/2078981217295163582 · Twitter Post
• https://git.kernel.org/stable/c/9560e6fee887a9594a89fa265b5b9c79b1591803 · Note
• https://git.kernel.org/stable/c/94ade38f317ea086a181db0e6b69c574b3b70a5e · Note
• https://git.kernel.org/stable/c/9a12fa5213cfc391e0eed63902d3be98f0913765 · Note