CVE-2026-63938: KVM: SEV: Check PSC request indices against the actual size of the buffer
In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: Check PSC request indices against the actual size of the buffer
When processing Page State Change (PSC) requests, validate the PSC buffer against the effective size of the scratch area, which could be less than the maximum size if the guest provided a pointer that isn't exactly at the start of the GHCB shared buffer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63938?
CVE-2026-63938 has a critical severity rating of 9.3.
How do I fix CVE-2026-63938?
To fix CVE-2026-63938, update the Linux kernel to the latest version where this vulnerability has been patched.
What systems are affected by CVE-2026-63938?
CVE-2026-63938 affects systems running the Linux kernel with KVM SEV functionalities.
What kind of vulnerability is CVE-2026-63938?
CVE-2026-63938 is a buffer overflow vulnerability related to Page State Change (PSC) request processing.
Can CVE-2026-63938 lead to data corruption?
Yes, CVE-2026-63938 can potentially lead to data corruption due to insufficient validation of buffer sizes.