HIGH

Google pays $250k for Linux vulnerability allowing guest VM escapes

Ars Technica Security • Jul 08, 2026

HIGH

CVE-2026-3195 Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)

Microsoft Security Response Center • Jun 28, 2026

HIGH

CVE-2026-3196 Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation

Microsoft Security Response Center • Jun 28, 2026

INFO

RHSA-2026:18479: Important: qemu-kvm security update

Red Hat Errata • May 19, 2026

INFO

CVE-2026-31591 KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish

Microsoft Security Response Center • Apr 26, 2026

INFO

CVE-2026-31592 KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock

Microsoft Security Response Center • Apr 26, 2026

INFO

CVE-2026-23401 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

Microsoft Security Response Center • Apr 26, 2026

INFO

CVE-2026-31588 KVM: x86: Use scratch field in MMIO fragment to hold small write values

Microsoft Security Response Center • Apr 26, 2026

MEDIUM

CVE-2026-31593 KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU

Microsoft Security Response Center • Apr 26, 2026

LOW

CVE-2026-31590 KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION

Microsoft Security Response Center • Apr 26, 2026

MEDIUM

BTS #70 - How Cheap KVMs Could Be Your Network's Weak Link

Eclypsium • Mar 25, 2026

HIGH

CVE-2026-23005: In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Clear XSTATE_BV[i] in ...

NIST NVD • Jan 25, 2026