{"id":"CVE-2026-43133","revision":"6e6bddf806644b1694f115ba3440156c","records":[{"revision":"6e6bddf806644b1694f115ba3440156c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-43133","aliases":[],"title":"KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation\n\nCommit cc3ed80ae69f (\"KVM: nSVM: always use vmcb01 to for vmsave/vmload\nof guest state\") made KVM always use vmcb01 for the fields controlled by\nVMSAVE/VMLOAD, but it missed updating the VMLOAD/VMSAVE emulation code\nto always use vmcb01.\n\nAs a result, if VMSAVE/VMLOAD is executed by an L2 guest and is not\nintercepted by L1, KVM will mistakenly use vmcb02. Always use vmcb01\ninstead of the current VMCB.","state":0,"publishedAt":"2026-05-06T11:27:20.882+00:00","modifiedAt":"2026-10-19T19:16:21.731+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/x86/kvm/svm/svm.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"cc3ed80ae69f454c3d904af9f65394a540099723\",\n                            \"lessThan\": \"10063e1251c1485034a018236080792ad083dcc5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cc3ed80ae69f454c3d904af9f65394a540099723\",\n                            \"lessThan\": \"c3b7015000988ba35ecd5648f4b2283960f00543\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cc3ed80ae69f454c3d904af9f65394a540099723\",\n                            \"lessThan\": \"3880e331b0b31d0d5d3702b124f6c93539cd478a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cc3ed80ae69f454c3d904af9f65394a540099723\",\n                            \"lessThan\": \"fce2fd4a2ca05670a91015aacccf96a1c26268fd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cc3ed80ae69f454c3d904af9f65394a540099723\",\n                            \"lessThan\": \"d464cf1ed900d47c85393d40b00017b6adfc2e6c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cc3ed80ae69f454c3d904af9f65394a540099723\",\n                            \"lessThan\": \"0004ecb798b30e90d7ebfe74efae2d9423315a64\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cc3ed80ae69f454c3d904af9f65394a540099723\",\n                            \"lessThan\": \"127ccae2c185f62e6ecb4bf24f9cb307e9b9c619\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/x86/kvm/svm/svm.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.13\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.13\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.202\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.165\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.128\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.75\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.16\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19.6\",\n                            \"lessThanOrEqual\": \"6.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.0\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H","score":7.9,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/10063e1251c1485034a018236080792ad083dcc5","https://git.kernel.org/stable/c/c3b7015000988ba35ecd5648f4b2283960f00543","https://git.kernel.org/stable/c/3880e331b0b31d0d5d3702b124f6c93539cd478a","https://git.kernel.org/stable/c/fce2fd4a2ca05670a91015aacccf96a1c26268fd","https://git.kernel.org/stable/c/d464cf1ed900d47c85393d40b00017b6adfc2e6c","https://git.kernel.org/stable/c/0004ecb798b30e90d7ebfe74efae2d9423315a64","https://git.kernel.org/stable/c/127ccae2c185f62e6ecb4bf24f9cb307e9b9c619"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-43133","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-43133","identifiers":["CVE-2026-43133"]},"retained":false,"historicalAffected":[]}],"coverage":[]}