CVE-2026-45987

A flaw was found in the KVM (Kernel-based Virtual Machine) nSVM component of the Linux kernel. This vulnerability occurs when the interrupt shadow state is not correctly synchronized to the cached Virtual Machine Control Block (VMCB) after a Level 2 (L2) guest virtual machine (VM) execution. A local attacker with control over an L1 guest could potentially exploit this by manipulating the order of KVM API calls during VM state restoration. This could lead to a guest virtual CPU (vCPU) hang, resulting in a denial of service for the affected L2 guest.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.