CVE-2026-43133

high

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM:…

Vendor / product: Linux — linux kernel

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM: always use vmcb01 to for vmsave/vmload of guest state") made KVM always use vmcb01 for the fields controlled by VMSAVE/VMLOAD, but it missed updating the VMLOAD/VMSAVE emulation code to always use vmcb01. As a result, if VMSAVE/VMLOAD is executed by an L2 guest and is not intercepted by L1, KVM will mistakenly use vmcb02. Always use vmcb01 instead of the current VMCB.

CVSS

7.9

7.9 (CVSS v3.1)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H

Severity source: NVD CVSS v3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)

Timeline (UTC)

Published: 2026-05-06 12:16

Modified: 2026-11-11 21:10

NVD status: Modified

Last synced 5 hours ago

Verified against the source API 2026-11-11 21:11 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

linux / linux_kernel ≥5.13 <5.15.202, ≥5.16 <6.1.165, ≥6.2 <6.6.128, ≥6.7 <6.12.75, ≥6.13 <6.18.16, ≥6.19 <6.19.6

Weakness classification (CWE)

NVD-CWE-noinfo CWE-754 CWE-628

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Patch / mitigation: https://git.kernel.org/stable/c/0004ecb798b30e90d7ebfe74efae2d9423315a64

Patch / mitigation: https://git.kernel.org/stable/c/10063e1251c1485034a018236080792ad083dcc5

Patch / mitigation: https://git.kernel.org/stable/c/127ccae2c185f62e6ecb4bf24f9cb307e9b9c619

Patch / mitigation: https://git.kernel.org/stable/c/3880e331b0b31d0d5d3702b124f6c93539cd478a

Patch / mitigation: https://git.kernel.org/stable/c/c3b7015000988ba35ecd5648f4b2283960f00543

Patch / mitigation: https://git.kernel.org/stable/c/d464cf1ed900d47c85393d40b00017b6adfc2e6c

Patch / mitigation: https://git.kernel.org/stable/c/fce2fd4a2ca05670a91015aacccf96a1c26268fd

References

https://git.kernel.org/stable/c/0004ecb798b30e90d7ebfe74efae2d9423315a64 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/10063e1251c1485034a018236080792ad083dcc5 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/127ccae2c185f62e6ecb4bf24f9cb307e9b9c619 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3880e331b0b31d0d5d3702b124f6c93539cd478a 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c3b7015000988ba35ecd5648f4b2283960f00543 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d464cf1ed900d47c85393d40b00017b6adfc2e6c 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/fce2fd4a2ca05670a91015aacccf96a1c26268fd 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://access.redhat.com/errata/RHSA-2026:65334 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:66180 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:66357 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:67468 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:67469 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/security/cve/CVE-2026-43133 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://bugzilla.redhat.com/show_bug.cgi?id=2467065 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43133.json 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

Data sources

NVD CVE API 2.0 — fetched 2026-11-11 21:11 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

CVE-2026-43133

Affected products

Weakness classification (CWE)

Mitigation & advisories

References

Data sources

Learn the basics

Related CVEs