CVE-2026-31591
- Source
- https://cve.org/CVERecord?id=CVE-2026-31591
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31591.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-31591
- Downstream
- Related
- Published
- 2026-04-24T14:42:18.276Z
- Modified
- 2026-06-24T09:14:25.482382353Z
- Summary
- KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish
Lock all vCPUs when synchronizing and encrypting VMSAs for SNP guests, as allowing userspace to manipulate and/or run a vCPU while its state is being synchronized would at best corrupt vCPU state, and at worst crash the host kernel.
Opportunistically assert that vcpu->mutex is held when synchronizing its VMSA (the SEV-ES path already locks vCPUs).
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31591.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/30fd9d8c82087742168db779929d8be0459b0716
- https://git.kernel.org/stable/c/4df77742e8b9a6b935bdf46f02fd0aca4d4ee7f5
- https://git.kernel.org/stable/c/c87938fc7d99a06a7e5477c45b4e5a4148f85d66
- https://git.kernel.org/stable/c/cb923ee6a80f4e604e6242a4702b59251e61a380
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31591.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-31591
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedad27ce155566f2b4400fa865859834592bd18777Fixed30fd9d8c82087742168db779929d8be0459b0716Fixed4df77742e8b9a6b935bdf46f02fd0aca4d4ee7f5Fixedc87938fc7d99a06a7e5477c45b4e5a4148f85d66Fixedcb923ee6a80f4e604e6242a4702b59251e61a380