Riskcovery

CVE-2026-31591

KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish

State
Published
Severity
Not scored
Published
Apr 24, 2026
Updated
Jun 14, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish

Lock all vCPUs when synchronizing and encrypting VMSAs for SNP guests, as allowing userspace to manipulate and/or run a vCPU while its state is being synchronized would at best corrupt vCPU state, and at worst crash the host kernel.

Opportunistically assert that vcpu->mutex is held when synchronizing its VMSA (the SEV-ES path already locks vCPUs).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ad27ce155566f2b4400fa865859834592bd18777 to before 30fd9d8c82087742168db779929d8be0459b0716Affected
  • ad27ce155566f2b4400fa865859834592bd18777 to before 4df77742e8b9a6b935bdf46f02fd0aca4d4ee7f5Affected
  • ad27ce155566f2b4400fa865859834592bd18777 to before c87938fc7d99a06a7e5477c45b4e5a4148f85d66Affected
  • ad27ce155566f2b4400fa865859834592bd18777 to before cb923ee6a80f4e604e6242a4702b59251e61a380Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.18.24 through 6.18.*Not affected
  • 6.19.14 through 6.19.*Not affected
  • 7.0.1 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.