CVE-2026-46295

A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) component. A race condition in the Advanced Programmable Interrupt Controller (APIC) interrupt handling can lead to an incorrect state during interrupt synchronization. This issue, occurring between a sender and target virtual CPU (vCPU), results in a spurious warning and inefficient processing of virtual machine (VM) entry and exit cycles. While interrupts are not lost, this can cause performance degradation and unnecessary resource consumption within a virtualized environment.

This vulnerability is classified as having a Moderate impact because potential exposure is restricted to host environments executing hardware-assisted virtualization and does not enable privilege escalation or arbitrary code execution. The underlying race condition results in spurious kernel warnings and degraded execution efficiency during virtual processor interrupt handling without causing interrupt loss or host crashes. In typical Red Hat deployments, older enterprise platforms do not include the vulnerable logic, limiting the blast radius to newer environments running affected hypervisor features.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.