PT-2026-79612 · Linux · Linux Kernel

CVE-2026-74607

·

Published

2026-08-22

·

Updated

2026-08-27

CVSS v3.1

8.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the KVM SVM component where the interaction between KVM CAP VM MOVE ENC CONTEXT FROM and KVM CAP VM COPY ENC CONTEXT FROM can lead to two problems. First, in the sev migrate from() function, mirror entries may be moved to the owner's mirror vms list without holding the owner's lock, allowing concurrent COPY or destroy operations to corrupt the list. Second, in the sev vm destroy() function, a concurrent KVM CAP VM MOVE ENC CONTEXT FROM operation could change the sev->enc context owner variable, resulting in the incorrect VM receiving kvm put kvm(). These issues occur because the owner could be modified or disappear between the time it is read and the time it is locked.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

AZL-97085
CVE-2026-74607

Affected Products

Linux Kernel