CVE-2026-46082

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0

INVLPGA should cause a #UD when EFER.SVME is not set. Add a check to properly inject #UD when EFER.SVME=0.

[sean: tag for stable@]

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= ff092385e8285c03d8b148f42f46f98c5f4becd5, < ebb63390142c6458fc37758e0892759989cc159f; >= ff092385e8285c03d8b148f42f46f98c5f4becd5, < 491139c17f8ad5773303068411f6ac5eed438b51; >= ff092385e8285c03d8b148f42f46f98c5f4becd5, < 3ac9d4241d205f5d0df06358349ca718ebb0fa12; >= ff092385e8285c03d8b148f42f46f98c5f4becd5, < 643125b66ffc1147c66616b749475ba9efb15971; >= ff092385e8285c03d8b148f42f46f98c5f4becd5, < c15392ed9e49c1a16b4d3a3ccf1b3bf2318a6c28; >= ff092385e8285c03d8b148f42f46f98c5f4becd5, < ee24928ecd85db4b68ed111e91fef36af0ca37b0; >= ff092385e8285c03d8b148f42f46f98c5f4becd5, < d99df02ff427f461102230f9c5b90a6c64ee8e23
LinuxLinux2.6.32

References

Timeline

Published
May 27, 2026
Last modified
Nov 6, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-460835.5In the Linux kernel, the following vulnerability has been resolved: spi: fix resource leaks on device setup failure Make sure to call contCVE-2026-460847.8In the Linux kernel, the following vulnerability has been resolved: RDMA/mana_ib: Disable RX steering on RSS QP destroy When an RSS QP is CVE-2026-460857.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxkad crypto unalignment handling Fix handling of a packet CVE-2026-460865.5In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB enCVE-2026-460875.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_sCVE-2026-460885.5In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_eCVE-2026-460895.5In the Linux kernel, the following vulnerability has been resolved: zram: do not forget to endio for partial discard requests As reported CVE-2026-46097.1The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized access due to a missing capabilitCVE-2026-460907.8In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopback_cCVE-2026-460915.5In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: heed coherency rules In a control request, theCVE-2026-460925.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: check for PCI upstream bridge existence pci_upstream_bridCVE-2026-460937.8In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_lock in shrinker decay_va_pool_node() can
CVE-2026-46082: Medium severity, CVSS 5.5 | Vulnix