CVE-2026-64284

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-64284

Key Details

CVE	CVE-2026-64284
CVSS Score / Version	7.1 (High) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is high; availability impact is high.
Affected products	Linux Kernel
Classified as	CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition)

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits

Move the handling of fastpath userspace exits into vendor code to ensure

KVM runs vendor specific operations that need to run before userspace gains

control of the vCPU. E.g. for VMX (and soon to be for SVM as well), KVM

needs to flush the PML buffer prior to exiting to userspace, otherwise any

memory written by the final KVM_RUN might never be flagged as dirty.

Note, waiting to snapshot CR0 and CR3 until svm_handle_exit() is flawed in

general, as that risks consuming stale state in a fastpath handler. That

will be addressed in a future change. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-64284
CVE	https://www.cve.org/CVERecord?id=CVE-2026-64284

Source

Reference

NVD

CVE