CVE-2026-31590

A flaw was found in the Linux kernel, specifically within the Kernel-based Virtual Machine (KVM) subsystem's Secure Encrypted Virtualization (SEV) feature. A local user could exploit this vulnerability by providing an excessively large memory region size when using the KVM_MEMORY_ENCRYPT_REG_REGION command. This action could trigger a kernel warning, potentially leading to system instability or consuming excessive system resources. The primary impact of this flaw is a Denial of Service (DoS), where legitimate system operations could be disrupted.

Moderate: A flaw in the KVM Secure Encrypted Virtualization (SEV) feature could allow a local user to trigger a kernel warning by providing an excessively large memory region size. This could lead to system instability or a Denial of Service. Exploitation requires the KVM SEV feature to be enabled and actively used on Red Hat Enterprise Linux 8, 9, and 10 systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.