CVE Explorer

CVE-2026-64247

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when querying sparse banks When checking if a VP ID is included in a sparse bank set, explicitly check that the ID can actually be contained in a sparse bank (the TLFS allows for a maximum of 64 banks of 64 vCPUs each). When handling a paravirtual TLB flush for L2, the VP ID is copied verbatim from the enlightened VMCS, without any bounds check, i.e. isn't guaranteed to be under the lim

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9dc2a1a58f87c23127e6df2b7e1b0b241ae4d6434e44c1b98b8c9faae09af33f

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["arch/x86/kvm/hyperv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.2"},{"lessThan":"6.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.144","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.95","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.38","versionType":"semver"},{"lessThanOrE…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:d040627a557286513e7e0979f6e9f7f1380c5809f7d3ba65caa1079c1f3265af · sha256:61876505b9bd5ee6… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["arch/x86/kvm/hyperv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d18756b12aab30d07794446445c93112e5c69a2e","status":"affected","version":"c58a318f6090efe06e6702b8882e2026f44f620e","versionType":"git"},{"lessThan":"83c2f52c6a78b1590034e955cff3fe0b052fe4ae","status":"affected","version":"c58a318f6090efe06e6702b8882e2026f44f620e","versionType":"git"},{"lessThan":"e36095d8d922bb26ce860231aacf0cd14edea07c","status":"affected","version":"c58a318f6090efe06e6702b8…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:d040627a557286513e7e0979f6e9f7f1380c5809f7d3ba65caa1079c1f3265af · sha256:61876505b9bd5ee6… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:d040627a557286513e7e0979f6e9f7f1380c5809f7d3ba65caa1079c1f3265af · sha256:61876505b9bd5ee6… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:d040627a557286513e7e0979f6e9f7f1380c5809f7d3ba65caa1079c1f3265af · sha256:61876505b9bd5ee6… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":8.4,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:d040627a557286513e7e0979f6e9f7f1380c5809f7d3ba65caa1079c1f3265af · sha256:61876505b9bd5ee6… · /containers/cna/metrics/0/cvssV3_1

Source references

5 source assertions

{"url":"https://git.kernel.org/stable/c/4721f8160f17554b003e8928bb61e6c9b2fe92a3"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:d040627a557286513e7e0979f6e9f7f1380c5809f7d3ba65caa1079c1f3265af · sha256:61876505b9bd5ee6… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/83c2f52c6a78b1590034e955cff3fe0b052fe4ae"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:d040627a557286513e7e0979f6e9f7f1380c5809f7d3ba65caa1079c1f3265af · sha256:61876505b9bd5ee6… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/d18756b12aab30d07794446445c93112e5c69a2e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:d040627a557286513e7e0979f6e9f7f1380c5809f7d3ba65caa1079c1f3265af · sha256:61876505b9bd5ee6… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/e36095d8d922bb26ce860231aacf0cd14edea07c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:d040627a557286513e7e0979f6e9f7f1380c5809f7d3ba65caa1079c1f3265af · sha256:61876505b9bd5ee6… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/f636cf6a1e7b7f40d48d8d08bd5f152aa61dd130"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:d040627a557286513e7e0979f6e9f7f1380c5809f7d3ba65caa1079c1f3265af · sha256:61876505b9bd5ee6… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer