CVE-2026-64104

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the sev-guest component of the virt subsystem. When the set memory encrypted() or set memory decrypted() functions fail, the caller cannot determine the exact point of failure, leaving pages in an unknown state. Because these pages might remain unencrypted, they cannot be safely returned to the buddy allocator, which is the system's mechanism for managing physical memory pages. To prevent this, pages must not be freed; instead, proper accounting is performed by calling the snp leak pages() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.