Linux kernel (arch/x86/kvm/svm): The SEV debug-encrypt path bounds each iteration by the source page offset but not the

Impact

The SEV debug-encrypt path bounds each iteration by the source page offset but not the destination offset, so the PSP and a following memcpy write past the end of a single-page kernel buffer - KASAN reports a 4095-byte out-of-bounds write. That is host kernel heap corruption, i.e. root on the node, driven by whoever drives the SEV VM.

Who can reach it

Reachable by any process that can open /dev/kvm and create an SEV VM, via KVM_MEMORY_ENCRYPT_OP with a debug-encrypt request whose destination offset exceeds the source offset. It is not the guest that triggers it - it is the process owning the VM, so this matters wherever tenants hold /dev/kvm (nested virtualization exposed, or bare-metal tenants). AMD SEV hosts running kvm_amd only.

What to do

Update to a kernel with the referenced stable commits. Interim: do not expose /dev/kvm to tenants, and disable SEV on nodes where you cannot patch promptly (kvm_amd sev=0).

References

Related entries

• Linux kernel (arch/x86/kvm/svm): After a CPU offline/online cycle, KVM's ASID generation counter is reset in a way thatCVE-2026-68093 · Linux kernel (arch/x86/kvm/svm)High
• Linux kernel (arch/x86/kvm/svm): On AMD hosts that cannot report the next RIP, KVM's WRMSR/HLT/INVD fastpath has toCVE-2025-40038 · Linux kernel (arch/x86/kvm/svm)High
• Linux kernel (arch/x86/kvm/svm): Page State Change requests from a confidential guest were validated against theCVE-2026-63938 · Linux kernel (arch/x86/kvm/svm)Critical
• Linux kernel (arch/x86/kvm/svm): KVM computed the usable size of the guest-provided GHCB scratch area wrongly, so aCVE-2026-63939 · Linux kernel (arch/x86/kvm/svm)Critical
• Linux kernel (arch/x86/kvm/svm): A confidential guest can hand KVM a port-I/O request with length or count zeroCVE-2026-63940 · Linux kernel (arch/x86/kvm/svm)Critical
• Linux kernel (arch/x86/kvm/svm): When a GSI route changed to something that cannot be posted, KVM only fixed up theCVE-2025-37885 · Linux kernel (arch/x86/kvm/svm)High