CVE-2026-64284
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/07/2026
Last modified:
30/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
KVM: x86: Ensure vendor&#39;s exit handler runs before fastpath userspace exits<br />
<br />
Move the handling of fastpath userspace exits into vendor code to ensure<br />
KVM runs vendor specific operations that need to run before userspace gains<br />
control of the vCPU. E.g. for VMX (and soon to be for SVM as well), KVM<br />
needs to flush the PML buffer prior to exiting to userspace, otherwise any<br />
memory written by the final KVM_RUN might never be flagged as dirty.<br />
<br />
Note, waiting to snapshot CR0 and CR3 until svm_handle_exit() is flawed in<br />
general, as that risks consuming stale state in a fastpath handler. That<br />
will be addressed in a future change.
Impact
Base Score 3.x
7.10
Severity 3.x
HIGH