Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43315

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding Drop the WARN in svm_set_nested_state() on nested_svm_load_cr3() failing as it is trivially easy to trigger from userspace by modifying CPUID after loading CR3. E.g. modifying the state restoration selftest like so: --- tools/testing/selftests/kvm/x86/state_test.c +++ tools/testing/selftests/kvm/x86/state_test.c @@ -280,7 +280,16 @@ int main(
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:daadef37667e5e1aa427d5a8ffa3bef315e48318e67e04955d42d445a84df7e3
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["arch/x86/kvm/svm/nested.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.14"},{"lessThan":"5.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.128","versionType":"semver"},{"lessT…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3fd460df471dd3e6c86be8375a3d1b9e6e8fc9e38bb62e29c38b0b336a5b7f98 · sha256:d8fe463bd9c0a6f7… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["arch/x86/kvm/svm/nested.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"155ec243ef726f4bc49536fa0bfb565dc011ab17","status":"affected","version":"b222b0b88162bdef4eceb12a79d5edbbdb23dbfd","versionType":"git"},{"lessThan":"580ea57840864d40e019bc13fd26afdc8d510a2f","status":"affected","version":"b222b0b88162bdef4eceb12a79d5edbbdb23dbfd","versionType":"git"},{"lessThan":"deb8f6dfd31d94b18dbeeaa8c01fbec5fc70fd2b","status":"affected","version":"b222b0b88162bdef4ece…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3fd460df471dd3e6c86be8375a3d1b9e6e8fc9e38bb62e29c38b0b336a5b7f98 · sha256:d8fe463bd9c0a6f7… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["arch/x86/kvm/svm/nested.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.14"},{"lessThan":"5.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.128","versionType":"semver"},{"lessT…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3fd460df471dd3e6c86be8375a3d1b9e6e8fc9e38bb62e29c38b0b336a5b7f98 · sha256:d8fe463bd9c0a6f7… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["arch/x86/kvm/svm/nested.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"155ec243ef726f4bc49536fa0bfb565dc011ab17","status":"affected","version":"b222b0b88162bdef4eceb12a79d5edbbdb23dbfd","versionType":"git"},{"lessThan":"580ea57840864d40e019bc13fd26afdc8d510a2f","status":"affected","version":"b222b0b88162bdef4eceb12a79d5edbbdb23dbfd","versionType":"git"},{"lessThan":"deb8f6dfd31d94b18dbeeaa8c01fbec5fc70fd2b","status":"affected","version":"b222b0b88162bdef4ece…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3fd460df471dd3e6c86be8375a3d1b9e6e8fc9e38bb62e29c38b0b336a5b7f98 · sha256:d8fe463bd9c0a6f7… · /containers/cna/affected/0

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/155ec243ef726f4bc49536fa0bfb565dc011ab17"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3fd460df471dd3e6c86be8375a3d1b9e6e8fc9e38bb62e29c38b0b336a5b7f98 · sha256:d8fe463bd9c0a6f7… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/580ea57840864d40e019bc13fd26afdc8d510a2f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3fd460df471dd3e6c86be8375a3d1b9e6e8fc9e38bb62e29c38b0b336a5b7f98 · sha256:d8fe463bd9c0a6f7… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/969e5e13ff5c18603f21d1f9f64ec9194e141ac0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3fd460df471dd3e6c86be8375a3d1b9e6e8fc9e38bb62e29c38b0b336a5b7f98 · sha256:d8fe463bd9c0a6f7… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/ce904c8a5bbe697eae0f7e34b07095bd7a6dee19"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3fd460df471dd3e6c86be8375a3d1b9e6e8fc9e38bb62e29c38b0b336a5b7f98 · sha256:d8fe463bd9c0a6f7… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/deb8f6dfd31d94b18dbeeaa8c01fbec5fc70fd2b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3fd460df471dd3e6c86be8375a3d1b9e6e8fc9e38bb62e29c38b0b336a5b7f98 · sha256:d8fe463bd9c0a6f7… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/ebb2ab4f1c87d6b52776292cf7dc16aea48e95f8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3fd460df471dd3e6c86be8375a3d1b9e6e8fc9e38bb62e29c38b0b336a5b7f98 · sha256:d8fe463bd9c0a6f7… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/fc3ba56385d03501eb582e4b86691ba378e556f9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3fd460df471dd3e6c86be8375a3d1b9e6e8fc9e38bb62e29c38b0b336a5b7f98 · sha256:d8fe463bd9c0a6f7… · /containers/cna/references/6

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer