7.9

CVE-2026-43133

KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation

In the Linux kernel, the following vulnerability has been resolved:

KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation

Commit cc3ed80ae69f ("KVM: nSVM: always use vmcb01 to for vmsave/vmload
of guest state") made KVM always use vmcb01 for the fields controlled by
VMSAVE/VMLOAD, but it missed updating the VMLOAD/VMSAVE emulation code
to always use vmcb01.

As a result, if VMSAVE/VMLOAD is executed by an L2 guest and is not
intercepted by L1, KVM will mistakenly use vmcb02. Always use vmcb01
instead of the current VMCB.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.13 < 5.15.202
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.165
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.128
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.75
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.16
Linux ≫ Linux Kernel Version >= 6.19 < 6.19.6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.028
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.9 2 5.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
0b0ca135-0b70-47e7-9f44-1890c2a1c46c 7.9 2 5.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
CWE-628 Function Call with Incorrectly Specified Arguments

The product calls a function, procedure, or routine with arguments that are not correctly specified, leading to always-incorrect behavior and resultant weaknesses.

https://git.kernel.org/stable/c/10063e1251c1485034a018236080792ad083dcc5
Patch
https://git.kernel.org/stable/c/c3b7015000988ba35ecd5648f4b2283960f00543
Patch
https://git.kernel.org/stable/c/3880e331b0b31d0d5d3702b124f6c93539cd478a
Patch
https://git.kernel.org/stable/c/fce2fd4a2ca05670a91015aacccf96a1c26268fd
Patch
https://git.kernel.org/stable/c/d464cf1ed900d47c85393d40b00017b6adfc2e6c
Patch
https://git.kernel.org/stable/c/0004ecb798b30e90d7ebfe74efae2d9423315a64
Patch
https://git.kernel.org/stable/c/127ccae2c185f62e6ecb4bf24f9cb307e9b9c619
Patch
https://access.redhat.com/security/cve/CVE-2026-43133
https://bugzilla.redhat.com/show_bug.cgi?id=2467065
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43133.json