Home

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish Lock all vCPUs when synchronizing and encrypting VMSAs for SNP guests, as allowing userspace to manipulate and/or run a vCPU while its state is being synchronized would at best corrupt vCPU state, and at worst crash the host kernel. Opportunistically assert that vcpu->mutex is held when synchronizing its VMSA (the SEV-ES path already locks vCPUs).

PUBLISHED Reserved 2026-03-09 | Published 2026-04-24 | Updated 2026-04-24 | Assigner Linux

Product status

Default status
unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 30fd9d8c82087742168db779929d8be0459b0716
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 4df77742e8b9a6b935bdf46f02fd0aca4d4ee7f5
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before c87938fc7d99a06a7e5477c45b4e5a4148f85d66
affected

Default status
affected

6.18.24 (semver)
unaffected

6.19.14 (semver)
unaffected

7.0.1 (semver)
unaffected

References

git.kernel.org/...c/30fd9d8c82087742168db779929d8be0459b0716

git.kernel.org/...c/4df77742e8b9a6b935bdf46f02fd0aca4d4ee7f5

git.kernel.org/...c/c87938fc7d99a06a7e5477c45b4e5a4148f85d66

cve.org (CVE-2026-31591)

nvd.nist.gov (CVE-2026-31591)

Download JSON