CVE-2026-63940

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM SEV component where Port I/O requests with a length or count of 0 were not explicitly ignored. This could lead to length underflow when setting up the software scratch area or other related code. The fix ensures that requests with a length of 0 are ignored and allows for warnings when attempting to configure the scratch area with a length of 0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.