CVE-2026-46032
Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
27/05/2026
Última modificación:
16/06/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT<br />
<br />
If loading L1&#39;s CR3 fails on a nested #VMEXIT, nested_svm_vmexit()<br />
returns an error code that is ignored by most callers, and continues to<br />
run L1 with corrupted state. A sane recovery is not possible in this<br />
case, and HW behavior is to cause a shutdown. Inject a triple fault<br />
instead, and do not return early from nested_svm_vmexit(). Continue<br />
cleaning up the vCPU state (e.g. clear pending exceptions), to handle<br />
the failure as gracefully as possible.<br />
<br />
From the APM:<br />
<br />
Upon #VMEXIT, the processor performs the following actions in order to<br />
return to the host execution context:<br />
<br />
...<br />
<br />
if (illegal host state loaded, or exception while loading host state)<br />
shutdown<br />
else<br />
execute first host instruction following the VMRUN<br />
<br />
Remove the return value of nested_svm_vmexit(), which is mostly<br />
unchecked anyway.
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.9 (incluyendo) | 7.0.4 (excluyendo) |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página



