CVE-2026-64284: KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
Move the handling of fastpath userspace exits into vendor code to ensure KVM runs vendor specific operations that need to run before userspace gains control of the vCPU. E.g. for VMX (and soon to be for SVM as well), KVM needs to flush the PML buffer prior to exiting to userspace, otherwise any memory written by the final KVMRUN might never be flagged as dirty.
Note, waiting to snapshot CR0 and CR3 until svmhandleexit() is flawed in general, as that risks consuming stale state in a fastpath handler. That will be addressed in a future change.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64284?
The severity of CVE-2026-64284 is high, with a CVSS score of 7.1.
How do I fix CVE-2026-64284?
To fix CVE-2026-64284, apply the available patches provided for the Linux kernel.
What systems are impacted by CVE-2026-64284?
CVE-2026-64284 impacts systems running the affected Linux kernel versions with KVM virtualization.
What type of vulnerability is CVE-2026-64284?
CVE-2026-64284 is a vulnerability related to the handling of fastpath userspace exits in the KVM module of the Linux kernel.
When was CVE-2026-64284 published?
CVE-2026-64284 was published on July 25, 2026.