CVE-2026-64285

kernel: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) component, specifically within the Secure Nested Paging (SNP) guest functionality. When KVM populates a guest's CPUID (Central Processor Unit Identifier) data, it may attempt to write to a source memory page that is intended to be read-only. This incorrect memory pinning could lead to memory corruption, potentially allowing an attacker to overwrite sensitive data within the kernel.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-787 · Out-of-bounds Write