CVE-2026-72239

A flaw was found in the Linux kernel, specifically within the Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) feature. This vulnerability involves a timing issue, or race condition, during the process of clearing processor caches. If not handled correctly, this can lead to a situation where critical memory regions, known as Real Mode Protection (RMP) tables, are not properly synchronized across processors. This failure to synchronize violates fundamental firmware requirements, which could compromise the integrity and security of virtualized environments.

This vulnerability is rated as Moderate because triggering the race condition during cache invalidation requires host-level execution on systems configured for AMD SEV-SNP, limiting the risk to specific virtualization host initialization environments. Red Hat Enterprise Linux is not affected by this issue because the vulnerable code sequence introduced upstream is not present in supported Red Hat kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.