OESA-2026-3709

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3709

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-3709.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2026-3709

Upstream

CVE-2026-64561

Published

2026-09-14T16:33:36Z

Modified

2026-09-13T16:45:32Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator

Summary

kernel security update

Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Check for invalid/obsolete root after making MMU pages available\n\nCheck for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages zaps an in-use root, i.e. marks it invalid, then KVM will attempt to map memory into an invalid root. On its own, populating an invalid root is "fine", but because child shadow pages inherit their parent's role, any children created during the map/fetch will be created as invalid pages, thus violating KVM's invariant that invalid pages are never on the list of active MMU pages.\n\nNote, the underlying flaw has existed since KVM first started tracking invalid roots in 2008 (commit 2e53d63acba7, "KVM: MMU: ignore zapped root pagetables"), but the true badness only came along in 2020 (Linux 5.9) with the invariant that invalid shadow pages can't be on the list of active pages.\n\nNote #2, inheriting role.invalid when creating child shadow pages is also far from ideal; that flaw will be addressed separately.(CVE-2026-64561)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:24.03-LTS-SP4 / kernel

Package

Name: kernel
Purl: pkg:rpm/openEuler/kernel&distro=openEuler-24.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.6.0-159.4.13.167.oe2403sp4

Ecosystem specific

{
    "aarch64": [
        "bpftool-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "bpftool-debuginfo-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "kernel-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "kernel-64k-6.6.0-159.4.13.167.oe2403sp4+64k.aarch64.rpm",
        "kernel-64k-devel-6.6.0-159.4.13.167.oe2403sp4+64k.aarch64.rpm",
        "kernel-64k-extra-modules-6.6.0-159.4.13.167.oe2403sp4+64k.aarch64.rpm",
        "kernel-64k-source-6.6.0-159.4.13.167.oe2403sp4+64k.aarch64.rpm",
        "kernel-debuginfo-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "kernel-debugsource-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "kernel-devel-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "kernel-extra-modules-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "kernel-headers-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "kernel-source-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "kernel-tools-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "kernel-tools-debuginfo-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "kernel-tools-devel-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "perf-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "perf-debuginfo-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "python3-perf-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm",
        "python3-perf-debuginfo-6.6.0-159.4.13.167.oe2403sp4.aarch64.rpm"
    ],
    "src": [
        "kernel-6.6.0-159.4.13.167.oe2403sp4.src.rpm"
    ],
    "x86_64": [
        "bpftool-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "bpftool-debuginfo-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "kernel-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "kernel-debuginfo-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "kernel-debugsource-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "kernel-devel-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "kernel-extra-modules-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "kernel-headers-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "kernel-source-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "kernel-tools-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "kernel-tools-debuginfo-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "kernel-tools-devel-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "perf-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "perf-debuginfo-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "python3-perf-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm",
        "python3-perf-debuginfo-6.6.0-159.4.13.167.oe2403sp4.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-3709.json"