Linux Kernel Vulnerability in KVM: Issues with Nested VM-Enter Processing

CVE-2026-68081

What is CVE-2026-68081?

A vulnerability exists in the Linux kernel's KVM component that may lead to memory leaks during nested virtual machine operations. Specifically, when a nested VM-Enter operation fails due to an invalid guest state, the system may not properly release vmcs12 pages, resulting in potential exposure of pinned memory pages. This could allow for unauthorized access to sensitive data mapped in those pages if the efforts to re-execute the VMLAUNCH or VMRESUME commands are made. Proper handling of memory pages during virtualization scenarios is crucial for maintaining system security and preventing resource leaks.

References