Riskcovery

CVE-2026-89931

KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit

State
Published
Severity
Not scored
Published
Sep 16, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit

Always check and clear KVM_REQ_GET_NESTED_STATE_PAGES when emulating a nested VM-Exit to ensure the request is cleared, even when KVM was built with CONFIG_KVM_HYPERV=n, as KVM subtly relies on the "check" to clear the flag and thus avoid double-mapping the vmcs12 pages, e.g. if KVM manages to bail from VM-Enter without processing the request, and then emulates VMLAUNCH or VMRESUME.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b4f69df0f65e97fec439130a0d0a8b9c7cc02df2 to before ae190f2439ca30067927077bf570d4c5edf07a0fAffected
  • b4f69df0f65e97fec439130a0d0a8b9c7cc02df2 to before 674a3244f07f323f21a106a7bdcaebb6db6a5058Affected
  • b4f69df0f65e97fec439130a0d0a8b9c7cc02df2 to before bbec4adc2f340d85f4a77a9ddcddaa6b1f4639c5Affected
  • b4f69df0f65e97fec439130a0d0a8b9c7cc02df2 to before 11722439fb206c88e6f31be54173efa9880b4ccbAffected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.51 through 6.18.*Not affected
  • 7.2.5 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.