CVE-2026-52959

A flaw was found in the Linux kernel's Secure Encrypted Virtualization (SEV) guest module. This vulnerability allows a malicious host to provide an invalid buffer size during an extended guest request. This incorrect handling of host-controlled page order during the cleanup process can lead to a mismatch between the allocated and freed buffer sizes, potentially resulting in corruption within the page allocator. This corruption could lead to system instability or a denial of service.