CVE-2026-89930

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM nVMX component where local TLB flushes are not serviced when a nested VM-Enter fails, such as during failed VMCS checks in the nested vmx enter non root mode() function. This occurs because TLB flushes are typically handled during full nested VM-Exits via nested vmx vmexit(). If a VM entry fails after nested vmx transition tlb flush() updates the last vpid variable, the TLB may not be flushed. This can lead to a scenario where a subsequent successful VM entry uses stale cached translations if the L1 guest changed the L2 VPID. TLB (Translation Lookaside Buffer) is a hardware cache used by the memory management unit to improve virtual-to-physical address translation speed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.