Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-63938

Опубликовано: 19 июл. 2026
Источник: redhat
CVSS3: 7

Описание

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the actual size of the buffer When processing Page State Change (PSC) requests, validate the PSC buffer against the effective size of the scratch area, which could be less than the maximum size if the guest provided a pointer that isn't exactly at the start of the GHCB shared buffer.

A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) Secure Encrypted Virtualization (SEV) feature. When processing Page State Change (PSC) requests, the system does not properly validate the PSC buffer against the effective size of the scratch area. This can occur if a guest operating system provides a pointer that is not precisely at the start of the Guest Hypervisor Communication Block (GHCB) shared buffer, potentially leading to out-of-bounds memory access. This vulnerability could allow a malicious guest to cause a denial of service on the host system.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-1285
https://bugzilla.redhat.com/show_bug.cgi?id=2502336kernel: KVM: SEV: Check PSC request indices against the actual size of the buffer

7 High

CVSS3

Связанные уязвимости

CVSS3: 9.3
ubuntu
14 дней назад

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the actual size of the buffer When processing Page State Change (PSC) requests, validate the PSC buffer against the effective size of the scratch area, which could be less than the maximum size if the guest provided a pointer that isn't exactly at the start of the GHCB shared buffer.

CVSS3: 9.3
nvd
14 дней назад

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the actual size of the buffer When processing Page State Change (PSC) requests, validate the PSC buffer against the effective size of the scratch area, which could be less than the maximum size if the guest provided a pointer that isn't exactly at the start of the GHCB shared buffer.

CVSS3: 9.3
debian
14 дней назад

In the Linux kernel, the following vulnerability has been resolved: K ...

CVSS3: 9.3
github
14 дней назад

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the actual size of the buffer When processing Page State Change (PSC) requests, validate the PSC buffer against the effective size of the scratch area, which could be less than the maximum size if the guest provided a pointer that isn't exactly at the start of the GHCB shared buffer.

7 High

CVSS3