CVE-2026-64284: KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits

Published Jul 25, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits

Move the handling of fastpath userspace exits into vendor code to ensure KVM runs vendor specific operations that need to run before userspace gains control of the vCPU. E.g. for VMX (and soon to be for SVM as well), KVM needs to flush the PML buffer prior to exiting to userspace, otherwise any memory written by the final KVMRUN might never be flagged as dirty.

Note, waiting to snapshot CR0 and CR3 until svmhandleexit() is flawed in general, as that risks consuming stale state in a fastpath handler. That will be addressed in a future change.

Affected Software

4 affected components
Linux Linux kernel
Linux Linux kernel>=6.12<6.12.96
Linux Linux kernel>=6.13<6.18.39
Linux Linux kernel>=6.19<7.1.4

Event History

Jul 25, 2026
CVE Published
via MITRE·08:49 AM
Data Sourced
via MITRE·08:49 AM
DescriptionSeverity
Data Sourced
via NVD·10:17 AM
RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2026-64284?

The severity of CVE-2026-64284 is high, with a CVSS score of 7.1.

2

How do I fix CVE-2026-64284?

To fix CVE-2026-64284, apply the available patches provided for the Linux kernel.

3

What systems are impacted by CVE-2026-64284?

CVE-2026-64284 impacts systems running the affected Linux kernel versions with KVM virtualization.

4

What type of vulnerability is CVE-2026-64284?

CVE-2026-64284 is a vulnerability related to the handling of fastpath userspace exits in the KVM module of the Linux kernel.

5

When was CVE-2026-64284 published?

CVE-2026-64284 was published on July 25, 2026.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203