Strix
64.1K

CVE-2026-89931

Unknown

Last modified

CVE-2026-89931 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit Always check and clear KVM_REQ_GET_NESTED_STATE_PAGES when emulating a nested VM-Exit to ensure the request is cleared, even when KVM was built with CONFIG_KVM_HYPERV=n, as KVM subtly relies on the "check" to clear the flag and thus avoid double-mapping the vmcs12 pages, e.g. if KVM manages to bail from VM-Enter without processing the request, and then emulates VMLAUNCH or VMRESUME..

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit Always check and clear KVM_REQ_GET_NESTED_STATE_PAGES when emulating a nested VM-Exit to ensure the request is cleared, even when KVM was built with CONFIG_KVM_HYPERV=n, as KVM subtly relies on the "check" to clear the flag and thus avoid double-mapping the vmcs12 pages, e.g. if KVM manages to bail from VM-Enter without processing the request, and then emulates VMLAUNCH or VMRESUME.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= b4f69df0f65e97fec439130a0d0a8b9c7cc02df2, < ae190f2439ca30067927077bf570d4c5edf07a0f; >= b4f69df0f65e97fec439130a0d0a8b9c7cc02df2, < 674a3244f07f323f21a106a7bdcaebb6db6a5058; >= b4f69df0f65e97fec439130a0d0a8b9c7cc02df2, < bbec4adc2f340d85f4a77a9ddcddaa6b1f4639c5; >= b4f69df0f65e97fec439130a0d0a8b9c7cc02df2, < 11722439fb206c88e6f31be54173efa9880b4ccb
LinuxLinux6.8

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-89931?
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit Always check and clear KVM_REQ_GET_NESTED_STATE_PAGES when emulating a nested VM-Exit to ensure the request is cleared, even when KVM was built with CONFIG_KVM_HYPERV=n, as KVM subtly relies on the "check" to clear the flag and thus avoid double-mapping the vmcs12 pages, e.g. if KVM manages to bail from VM-Enter without processing the request, and then emulates VMLAUNCH or VMRESUME.
How severe is CVE-2026-89931?
Severity scoring for CVE-2026-89931 is pending analysis.
How do I fix CVE-2026-89931?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-89931?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST