CVE-2026-46032

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the KVM nSVM component, a failure to restore the host CR3 (Control Register 3, which manages page tables) during a nested #VMEXIT can lead to the system continuing to run the L1 guest with a corrupted state. Because a sane recovery is not possible in this scenario, the hardware behavior is to trigger a shutdown. The issue is addressed by injecting a triple fault (a condition where a CPU fails to handle an exception while attempting to handle a previous exception) and ensuring the vCPU state is cleaned up, such as clearing pending exceptions, to handle the failure more gracefully.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.