CVE-2026-64309

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the crypto: ccp component where the SNP COMMIT command could trigger the initialization of SNP even if it was previously uninitialized. If SEV initialization fails while KVM is running normal VMs, a userspace process could potentially trigger this code path via /dev/sev ioctls, such as SEV PDH GEN, leading to the global zeroing of MSR VM HSAVE PA. This could result in a general protection fault and a host crash during the next VMRUN execution for an active VM.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.