In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
Ignore -EBUSY when checking nested events after exiting a blocking state while L2 is active, as exiting to userspace will generate a spurious userspace exit, usually with KVM_EXIT_UNKNOWN, and likely lead to the VM's demise. Continuing with the wakeup isn't perfect either, as *something* has gone sideways if a vCPU is awakened in L2 with an injected event (or worse, a nested run pending), but continuing on gives the VM a decent chance of surviving without any major side effects.
As explained in the Fixes commits, it _should_ be impossible for a vCPU to be put into a blocking state with an already-injected event (exception, IRQ, or NMI). Unfortunately, userspace can stuff MP_STATE and/or injected events, and thus put the vCPU into what should be an impossible state.
Don't bother trying to preserve the WARN, e.g. with an anti-syzkaller Kconfig, as WARNs can (hopefully) be added in paths where _KVM_ would be violating x86 architecture, e.g. by WARNing if KVM attempts to inject an exception or interrupt while the vCPU isn't running.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 7, 2026 | May 7, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 6, 2026 |
| Ubuntu | — | Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-awsUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-gke-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-azure-fipsUpgrade linux-image-raspiUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-64kUpgrade linux-image-oracleUpgrade linux-image-laptop-23.10Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-azure-fde-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-gcp-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-6.8 | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | May 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub