Intel

CVE-2026-64561

Security update for the Linux Kernel

mediumPoCEPSS 0.4%

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages zaps an in-use root, i.e. marks it invalid, then KVM will attempt to map memory into an invalid root. On its own, populating an invalid root is "fine", but because child shadow pages inherit their parent's role, any children created during the map/fetch will be created as invalid pages, thus violating KVM's invariant that invalid pages are never on the list of active MMU pages. Note, the underlying flaw has existed since KVM first started tracking invalid roots in 2008 (commit 2e53d63acba7, "KVM: MMU: ignore zapped root pagetables"), but the true badness only came along in 2020 (Linux 5.9) with the invariant that invalid shadow pages can't be on the list of active pages. Note #2, inheriting role.invalid when creating child shadow pages is also far from ideal; that flaw will be addressed separately.

Source: SUSE_CSAFSUSE_CSAFSUSE_CSAFSUSE_CSAFSUSE_CSAFBSIBSI_CSAFCVELISTV5DEBIAN_DSANVDCVEORGMSRC

Metrics

Severity
medium
Priority score
238.98
KEV status
—
Exploit maturity
PoC (publicly reported)
XIEM Effective CVSS
5.5
Source: cna-v3
CVSS v3
5.5
CVSS v4
—
EPSS percentile
27.8 %
Elevated — this CVE ranks above at least 10% of all CVEs scored today.
EPSS score
0.4 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-09-09 12:14 UTC
CWE
—

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

  1. CVE Modified2026-08-27 13:18 UTC· 416baaa9-dc9f-4396-8d5f-8c081fb06d67
    • Affected: Affected value modified. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/64xxx/CVE-2026-64561.json">CVE-2026-64561</a>
    • Reference: https://git.kernel.org/stable/c/0026dbb7de8ea76e97d6edf42fc3cc084564e2bf
    • Reference: https://git.kernel.org/stable/c/2abd5287f08319fa35764566b15c6e22cb1068db
    • Reference: https://git.kernel.org/stable/c/35e77467610c4a37cb0ff54ee56b85f73b1f5700
  2. CVE Modified2026-08-19 17:20 UTC· 416baaa9-dc9f-4396-8d5f-8c081fb06d67
    • Reference: https://git.kernel.org/stable/c/65c4f7a1028cf01a93a2762d679c289810ede990
    • Affected: Linux, Linux → Linux, Linux
  3. CVE Modified2026-08-17 05:18 UTC· 416baaa9-dc9f-4396-8d5f-8c081fb06d67
    • Affected: Linux, Linux → Linux, Linux
  4. CVE Modified2026-08-09 04:17 UTC· 416baaa9-dc9f-4396-8d5f-8c081fb06d67
    • Reference: https://github.com/V4bel/Zapscape
  5. CVE Modified2026-08-08 15:16 UTC· 416baaa9-dc9f-4396-8d5f-8c081fb06d67
    • CVSS V3.1: AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected operating systems

  • linux

    amazon / amazon_linux

  • linux

    suse / basesystem_module15

  • linux

    debian / debian_linux11.0

  • linux

    debian / debian_linux12.0

  • linux

    debian / debian_linux13.0

  • linux

    suse / development_tools_module15

  • linux

    redhat / enterprise_linux10.0

  • linux

    redhat / enterprise_linux8.0

  • linux

    redhat / enterprise_linux9.0

  • linux

    redhat / enterprise_linux_aus8.4

  • linux

    redhat / enterprise_linux_aus8.6

  • linux

    redhat / enterprise_linux_eus10.0

  • linux

    redhat / enterprise_linux_eus8.4

  • linux

    redhat / enterprise_linux_eus9.4

  • linux

    redhat / enterprise_linux_eus9.6

  • linux

    redhat / enterprise_linux_tus8.6

  • linux

    redhat / enterprise_linux_tus8.8

  • linux

    redhat / enterprise_linux_update_services_for_sap_solutions8.6

  • linux

    redhat / enterprise_linux_update_services_for_sap_solutions8.8

  • linux

    redhat / enterprise_linux_update_services_for_sap_solutions9.0

  • linux

    redhat / enterprise_linux_update_services_for_sap_solutions9.2

  • linux

    opensuse / leap15.3

  • linux

    opensuse / leap15.4

  • linux

    opensuse / leap15.5

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

  • AMD

    ProzessorEPYC Series

  • AMD

    ProzessorRyzen

  • arista

    cloudvision_agni2024.4.0 – 2025.2.2

  • arista

    cloudvision_portal2024.2.0 – 2026.1.0

  • arista

    velocloud_edge4.5.0 – 6.4.1

  • arista

    velocloud_gateway

  • arista

    velocloud_orchestrator

  • Dell

    NetWorkerVirtual Edition

  • Dell

    PowerProtect Data Domain7.10.1.70

  • Dell

    PowerProtect Data Domain7.13.1.40

  • Dell

    PowerProtect Data Domain8.3.1.10

  • Dell

    PowerProtect Data Domain8.4.0.0

  • IBM

    QRadar SIEM7.5.0 UP10 IF01

  • IBM

    QRadar SIEM7.5.0 UP11

  • IBM

    QRadar SIEM<7.5.0 UP15 IF06

  • IBM

    Security Guardium12

  • IBM

    Storage Scale6.1.9.5

  • IBM

    Storage Scale6.2.2.0

  • Juniper

    Junos Space24.1R2

  • Oracle

    VM3

  • redhat

    openshift_container_platform4.12 – 4.12.89

  • redhat

    openshift_container_platform4.13 – 4.13.66

  • redhat

    openshift_container_platform4.14 – 4.14.65

  • redhat

    openshift_container_platform4.15 – 4.15.64

References & sources

Linked CVEs

Show 51 more CVEs
IDCVE-2026-64561