{"id":"CVE-2026-46082","title":"KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0\n\nINVLPGA should cause a #UD when EFER.SVME is not set. Add a check to\nproperly inject #UD when EFER.SVME=0.\n\n[sean: tag …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < ebb63390142c6458fc37758e0892759989cc159f","Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < 491139c17f8ad5773303068411f6ac5eed438b51","Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < 3ac9d4241d205f5d0df06358349ca718ebb0fa12","Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < 643125b66ffc1147c66616b749475ba9efb15971","Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < c15392ed9e49c1a16b4d3a3ccf1b3bf2318a6c28","Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < ee24928ecd85db4b68ed111e91fef36af0ca37b0","Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < d99df02ff427f461102230f9c5b90a6c64ee8e23","Linux 2.6.32"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:07:35.472588Z"},"published":"2026-05-27","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:13:36.387Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-46082","references":[{"url":"https://git.kernel.org/stable/c/ebb63390142c6458fc37758e0892759989cc159f"},{"url":"https://git.kernel.org/stable/c/491139c17f8ad5773303068411f6ac5eed438b51"},{"url":"https://git.kernel.org/stable/c/3ac9d4241d205f5d0df06358349ca718ebb0fa12"},{"url":"https://git.kernel.org/stable/c/643125b66ffc1147c66616b749475ba9efb15971"},{"url":"https://git.kernel.org/stable/c/c15392ed9e49c1a16b4d3a3ccf1b3bf2318a6c28"},{"url":"https://git.kernel.org/stable/c/ee24928ecd85db4b68ed111e91fef36af0ca37b0"},{"url":"https://git.kernel.org/stable/c/d99df02ff427f461102230f9c5b90a6c64ee8e23"}],"tags":["cve.org"],"epss":0.00123,"epssPercentile":0.02032,"ingestedAt":"2026-11-06T16:57:43.342Z","slug":"CVE-2026-46082","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0\n\nINVLPGA should cause a #UD when EFER.SVME is not set. Add a check to\nproperly inject #UD when EFER.SVME=0.\n\n[sean: tag for stable@]\n\n## Affected\n\n- `Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < ebb63390142c6458fc37758e0892759989cc159f`\n- `Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < 491139c17f8ad5773303068411f6ac5eed438b51`\n- `Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < 3ac9d4241d205f5d0df06358349ca718ebb0fa12`\n- `Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < 643125b66ffc1147c66616b749475ba9efb15971`\n- `Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < c15392ed9e49c1a16b4d3a3ccf1b3bf2318a6c28`\n- `Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < ee24928ecd85db4b68ed111e91fef36af0ca37b0`\n- `Linux >= ff092385e8285c03d8b148f42f46f98c5f4becd5 < d99df02ff427f461102230f9c5b90a6c64ee8e23`\n- `Linux 2.6.32`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}