CVE-2026-46071None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 svm_copy_lbrs() always marks VMCB_LBR dirty in the destination VMCB. However, nested_svm_vmexit() uses it to copy LBRs to …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 21.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
0.2% → 0.2%
In the Linux kernel, the following vulnerability has been resolved:
KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12
svm_copy_lbrs() always marks VMCB_LBR dirty in the destination VMCB. However, nested_svm_vmexit() uses it to copy LBRs to vmcb12, and clearing clean bits in vmcb12 is not architecturally defined.
Move vmcb_mark_dirty() to callers and drop it for vmcb12.
This also facilitates incoming refactoring that does not pass the entire VMCB to svm_copy_lbrs().
Linux >= d20c796ca3709801f8a7fa36e8770a3dd8ebd34e < 165b08d2d1346dce5ed43db65e10f3194b9ae2feLinux >= d20c796ca3709801f8a7fa36e8770a3dd8ebd34e < 11d347b7edf5093d69aca72317300798a32bfd6bLinux >= d20c796ca3709801f8a7fa36e8770a3dd8ebd34e < a3f0981a5a0e0bd51ad74cc7d9eed32294b24002Linux >= d20c796ca3709801f8a7fa36e8770a3dd8ebd34e < 9efe23568806d1cd06f7d146f9b3037b8d585a9fLinux >= d20c796ca3709801f8a7fa36e8770a3dd8ebd34e < b53ab5167a81537777ac780bbd93d32613aa3bdaLinux 5.19Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99118Nonedrm/i915/dmc: Harden DMC firmware payload parsing
CVE-2026-99117Nonenet: bridge: mcast: don't truncate the port group walk on teardown
CVE-2026-99121Noneipv4: avoid divide by zero in fib_rebalance
CVE-2026-99120NoneKVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
CVE-2026-99119Nonedrm/amdgpu/userq: actually validate userq BOs
CVE-2026-99123Nonevsock/virtio: validate packet source for connected sockets