CVE-2026-89931

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit

Always check and clear KVM_REQ_GET_NESTED_STATE_PAGES when emulating a

nested VM-Exit to ensure the request is cleared, even when KVM was built

with CONFIG_KVM_HYPERV=n, as KVM subtly relies on the "check" to clear

the flag and thus avoid double-mapping the vmcs12 pages, e.g. if KVM

manages to bail from VM-Enter without processing the request, and then

emulates VMLAUNCH or VMRESUME.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References