In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs
The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs. The proper migration requires additional SNP-specific state such as guest_req_mutex, guest_req_buf, and guest_resp_buf to be transferred or initialized on the destination.
The SNP VM mirroring requires vmsa features to be copied as well otherwise ASID would be bound to SNP range while VM is detected as a SEV VM.
Reject SNP source VMs in migration/mirroring until proper SNP state transfer is implemented.
[sean: let lines poke past 80 chars, tag for stable]
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 16, 2026 | Aug 16, 2026 |
| Redhat_linux | — | No solution exists | Aug 20, 2026 | Aug 15, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1015-oemUpgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-generic-64k-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-7.0Upgrade linux-image-azure-lts-26.04Upgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-oracleUpgrade linux-image-7.0.0-38-genericUpgrade linux-image-azure-fde-7.0Upgrade linux-image-virtualUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1017-azureUpgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-ibm-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-7.0.0-1014-awsUpgrade linux-image-awsUpgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-azure-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-genericUpgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-realtime-64kUpgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-gke-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gke-64kUpgrade linux-image-generic-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-gke-64k-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-oem-26.04aUpgrade linux-image-aws-64k-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-azureUpgrade linux-image-realtime-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-oem-26.04Upgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-realtimeUpgrade linux-image-generic-hwe-26.04 | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 21, 2026 | Aug 15, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub