CVE-2026-46059

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN For guests with NRIPS disabled, L1 does not provide NextRIP when running an L2 with an injected soft interrupt, instead it advances the current RIP before running it. KVM uses the current RIP as the NextRIP in vmcb02 to emulate a CPU without NRIPS. However, after L2 runs the first time, NextRIP will be updated by the CPU and/or KVM, and the current RIP is no longer the correct value to use in vmcb02. Hence, after save/restore, use the current RIP if and only if a nested run is pending, otherwise use NextRIP. Give soft_int_next_rip the same treatment, as it's the same logic, just for a narrower use case. [sean: give soft_int_next_rip the same treatment]

• https://git.kernel.org/stable/c/3428ed1529a1af4cce5aff6c5bd2fcc39ad726bbPatch
• https://git.kernel.org/stable/c/69fe1411a5ce678b4da6489b5d2282b4e1d13acfPatch
• https://git.kernel.org/stable/c/8d397582f6b5e9fbcf09781c7c934b4910e94a50Patch

Published

May 27, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-46053In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-46054In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-46055In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-46056In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-46057In the Linux kernel, the following vulnerability has been re…3.3
• CVE-2026-46058In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-4606GV Edge Recording Manager (ERM) v2.3.1 improperly runs appli…10
• CVE-2026-46060In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46061In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46062In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-46063In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46064In the Linux kernel, the following vulnerability has been re…7.1