Home

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish Lock all vCPUs when synchronizing and encrypting VMSAs for SNP guests, as allowing userspace to manipulate and/or run a vCPU while its state is being synchronized would at best corrupt vCPU state, and at worst crash the host kernel. Opportunistically assert that vcpu->mutex is held when synchronizing its VMSA (the SEV-ES path already locks vCPUs).

PUBLISHED Reserved 2026-03-09 | Published 2026-04-24 | Updated 2026-05-11 | Assigner Linux

Product status

Default status
unaffected

ad27ce155566f2b4400fa865859834592bd18777 (git) before 30fd9d8c82087742168db779929d8be0459b0716
affected

ad27ce155566f2b4400fa865859834592bd18777 (git) before 4df77742e8b9a6b935bdf46f02fd0aca4d4ee7f5
affected

ad27ce155566f2b4400fa865859834592bd18777 (git) before c87938fc7d99a06a7e5477c45b4e5a4148f85d66
affected

ad27ce155566f2b4400fa865859834592bd18777 (git) before cb923ee6a80f4e604e6242a4702b59251e61a380
affected

Default status
affected

6.11
affected

Any version before 6.11
unaffected

6.18.24 (semver)
unaffected

6.19.14 (semver)
unaffected

7.0.1 (semver)
unaffected

7.1-rc1 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/30fd9d8c82087742168db779929d8be0459b0716

git.kernel.org/...c/4df77742e8b9a6b935bdf46f02fd0aca4d4ee7f5

git.kernel.org/...c/c87938fc7d99a06a7e5477c45b4e5a4148f85d66

git.kernel.org/...c/cb923ee6a80f4e604e6242a4702b59251e61a380

cve.org (CVE-2026-31591)

nvd.nist.gov (CVE-2026-31591)

Download JSON