CVE-2026-72239

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the x86 virt sev component where the removal of a WBINVD (Write Back and Invalidate Cache) operation before setting MSR AMD64 SYSCFG SNP EN violates firmware requirements. According to the SNP specification, software must ensure no CPUs contain dirty cache lines for the memory containing the RMP (Reverse Map Table) before invoking SNP INIT EX with INIT RMP set to 1. Because cachelines can move between CPUs in a dirty state, Inter-Processor Interrupts (IPIs) for WBINVD may race with this movement, potentially leaving cachelines unflushed. Executing the wbinvd on all cpus() function before setting SNPEn ensures the RMP table is not yet in use and is flushed correctly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.