CVE-2026-64307

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the crypto ccp component where the system could attempt to initialize SNP during an ioctl(SNP CONFIG) call. If SEV initialization fails while KVM is running normal VMs, a userspace process could trigger this path via /dev/sev ioctls, such as SEV PDH GEN. This could potentially zero out MSR VM HSAVE PA globally, leading to a general protection fault and a host crash during the next VMRUN execution for an active VM.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.