In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: Pin source page for write when adding CPUID data for SNP guest
When populating a guest_memfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the "correct" CPUID information if the userspace provided data is rejected by trusted firmware. Because KVM writes to the source page using a kernel mapping, pinning for read could result in KVM clobbering read-only memory.
Note, well-behaved VMMs are unlikely to be affected, as CPUID information is almost always dynamically generated by userspace, i.e. it's unlikely for the CPUID information to be backed by a read-only mapping.
[sean: rewrite shortlog and changelog, tag for stable@]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-generic-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gkeUpgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-raspi-realtimeUpgrade linux-image-genericUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-aws-64kUpgrade linux-image-nvidiaUpgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-generic-64kUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-64k-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-realtime-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-gcp-7.0Upgrade linux-image-gcpUpgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-7.0.0-31-genericUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1013-oemUpgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-oem-26.04bUpgrade linux-image-oem-7.0Upgrade linux-image-realtimeUpgrade linux-image-gke-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-gke-64kUpgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-aws-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-ibmUpgrade linux-image-7.0.0-1012-awsUpgrade linux-image-realtime-7.0Upgrade linux-image-nvidia-bos-64k-7.0 | Sep 14, 2026 | Sep 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub