Buffer Overflow Vulnerability in KVM by AMD Affects Linux Kernel

CVE-2026-63794

What is CVE-2026-63794?

A vulnerability exists in the KVM module of the Linux kernel, where insufficient bounds checking in the sev_dbg_crypt function can lead to a buffer overflow condition. Specifically, when the destination page offset exceeds the source page offset, the encryption process may attempt to write beyond allocated memory bounds. This flaw can arise in scenarios involving the secure encryption of virtualized environments, potentially leading to data corruption or unexpected behavior in the guest systems. To mitigate this vulnerability, the transfer length must be appropriately limited by the destination offset, as already enforced in related functions.

References