NVD Recent CVEs
CVE-2026-64247：Linux内核已修复以下漏洞：KVM: x86: hyper-v: 查询稀疏 bank 时限制 bank 索引
Linux内核已修复以下漏洞：KVM: x86: hyper-v: 查询稀疏 bank 时限制 bank 索引。在检查VP ID是否包含在稀疏 bank 集合中时，需显式检查该ID实际是否能被包含在稀疏 bank 中（TLFS允许最多64个bank，每个bank对应64个vCPU）。在处理L2的半虚拟化TLB刷新时，VP ID是直接从enlightened VMCS复制的，未进行任何边界检查，即无法保证其低于4096的限制。未检查VP ID的边界会导致在测试稀疏 bank 时发生越界读取，严格来说可能会导致KVM对L2 vCPU执行不必要的TLB刷新。================================================================== BUG: KASAN: use-after-free in hv_is_vp_in_sparse_set+0x85/0x100 [kvm] Read of size 8 at addr ffff88811ba5f598 by task hyperv_evmcs/2802 CPU: 12 UID: 1000 PID: 2802 Comm: hyperv_evmcs Not tainted 7.1.0-rc2 #7 PREEMPT Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Call Trace: dump_stack_lvl+0x51/0x60 print_report+0xcb/0x5d0 kasan_report+0xb4/0xe0 kasan_check_range+0x35/0x1b0 hv_is_vp_in_sparse_set+0x85/0x100 [kvm] kvm_hv_flush_tlb+0xe9e/0x16c0 [kvm] kvm_hv_hypercall+0xe6b/0x1e60 [kvm] vmx_handle_exit+0x485/0x1b60 [kvm_intel] kvm_arch_vcpu_ioctl_run+0x22e3/0x5070 [kvm] kvm_vcpu_ioctl+0x5d0/0x1