CVE-2026-64104
kernel: virt: sev-guest: Explicitly leak pages in unknown state
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's SEV-ES (Secure Encrypted Virtualization-Encrypted State) guest module. When memory encryption or decryption operations fail, the affected memory pages can be left in an unknown or unencrypted state. This could lead to information disclosure, as these pages are not safely returned to the system's memory allocator and may contain sensitive data.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-212 · Improper Removal of Sensitive Information Before Storage or Transfer