CVE-2026-80853

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1

Description An issue exists in the KVM subsystem when handling SEV or SEV-ES guests on SNP-enabled hosts. When decrypting or encrypting memory via a temporary buffer, the system may use a sub-page allocation. On SNP-enabled platforms, pages used for firmware writes must be temporarily assigned to the Firmware, making them inaccessible to software. If a sub-page is used, other kernel components may be allocated the remaining portion of the same page. When the software attempts to access this Firmware-owned page, it triggers RMP #PF violations (Reverse Map Table Page Faults), which can lead to a kernel panic. This is specifically related to the snp map cmd buf desc() function.

Recommendations Update the Linux kernel to version 7.2.5-1.1 or later.