CVE-2026-43483

A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem, specifically within the SVM (Secure Virtual Machine) module. This vulnerability arises from incorrect handling of CR8 write interceptions when the Advanced Virtual Interrupt Controller (AVIC) is activated or deactivated. This can lead to the CR8 register remaining intercepted, causing the Task Priority Register (TPR) to become out of sync with the hardware. For Windows guest operating systems, this desynchronization can result in system instability or crashes.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.