What is CVE-2026-64562?
This vulnerability in the Linux kernel's KVM nVMX subsystem occurs because the shadow VMCS is not hidden immediately after a VMCLEAR operation, leaving vmcs01 pointing to freed memory. This can lead to a use-after-free condition when the vCPU migrates before the pointer is cleared. Affected systems should apply the kernel patch promptly.
Azərbaycanca: Linux kernel-də KVM nVMX alt sistemində aşkar edilmiş bu zəiflik, VMCLEAR əməliyyatından sonra shadow VMCS-in düzgün gizlədilməməsi səbəbindən vmcs01 göstəricisinin azad edilmiş yaddaşa işarə etməsinə yol açır. Bu, vCPU-nun köçürülməsi (migration) zamanı istifadə olunmuş yaddaşa giriş (use-after-free) riski yaradır. Təsirə məruz qalan sistemlərdə nüvəni yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-416
FAQ2
After which operation does the CVE-2026-64562 vulnerability in the Linux kernel cause the vmcs01 pointer to reference freed memory?
The vulnerability occurs in the KVM nVMX subsystem when the shadow VMCS is not hidden immediately after a VMCLEAR operation, causing the vmcs01 pointer to continue pointing to freed memory.
How can vCPU migration trigger the CVE-2026-64562 vulnerability?
If the vCPU migrates before the pointer is cleared, this can lead to a use-after-free condition on the previously freed memory.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.