CVE-2026-64562
High
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR free_nested() frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loaded_vmcs_clear(), the vCPU might migrate before the pointer is cleared and __loaded_vmcs_clear() may then execute VMCLEAR. The VMCS needs to stay attached until its explicit VMCLEAR completes, but then it can be hidden and the page safely freed.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Linux
PublishedAug 4, 2026
First seenAug 4, 2026
Weakness typeCWE-416Use after free
How to fix
Update
- Linux Linuxb82c3144d8264265448292ca406f60bafeba3b6f, 4f50e6aec16f69627dbad5704d1e90a255d766a7, dc3eecfa219ebc9d01eaf7d1abd1441efe884dab, af56298e9d86e6098cd1d2e155cb2949b7c45412, 589419470030a89f16cf19300658b6dc644ca946, 8001d2ce9d9bd09118ce523aef595aa094573ae3, 1dabef6e206568bf9d9ade74f6e56a48ea35695d, 622ebfac01ba4f9c0060cebd41257fe46fc4a0b3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 355f4fb1405ec29d0fac49b4d41fcd78cbd455d5 ≤ v < b82c3144d8264265448292ca406f60bafeba3b6f, 355f4fb1405ec29d0fac49b4d41fcd78cbd455d5 ≤ v < 4f50e6aec16f69627dbad5704d1e90a255d766a7, 355f4fb1405ec29d0fac49b4d41fcd78cbd455d5 ≤ v < dc3eecfa219ebc9d01eaf7d1abd1441efe884dab, 355f4fb1405ec29d0fac49b4d41fcd78cbd455d5 ≤ v < af56298e9d86e6098cd1d2e155cb2949b7c45412, 355f4fb1405ec29d0fac49b4d41fcd78cbd455d5 ≤ v < 589419470030a89f16cf19300658b6dc644ca946, 355f4fb1405ec29d0fac49b4d41fcd78cbd455d5 ≤ v < 8001d2ce9d9bd09118ce523aef595aa094573ae3, 355f4fb1405ec29d0fac49b4d41fcd78cbd455d5 ≤ v < 1dabef6e206568bf9d9ade74f6e56a48ea35695d, 355f4fb1405ec29d0fac49b4d41fcd78cbd455d5 ≤ v < 622ebfac01ba4f9c0060cebd41257fe46fc4a0b3, 4.9 | b82c3144d8264265448292ca406f60bafeba3b6f, 4f50e6aec16f69627dbad5704d1e90a255d766a7, dc3eecfa219ebc9d01eaf7d1abd1441efe884dab, af56298e9d86e6098cd1d2e155cb2949b7c45412, 589419470030a89f16cf19300658b6dc644ca946, 8001d2ce9d9bd09118ce523aef595aa094573ae3, 1dabef6e206568bf9d9ade74f6e56a48ea35695d, 622ebfac01ba4f9c0060cebd41257fe46fc4a0b3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.