Log in Start free

Vulnerability · Published Aug 8, 2026 · Assigned by Linux

CVE-2026-68081KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 90.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path doesn't use nested_vmx_vmexit() as that API is intended to be used if and only if L2 is active, and the open coded equivalent neglects to put the vmcs12 pages. Failure to put the vmcs12 pages leaks any pinned pages (and/or mappings) if L1 retries VMLAUNCH/VMRESUME. Note, the !from_vmenter scenario doesn't suffer the same problem, as vmx_get_nested_state_pages() only gets/pins/maps the vmcs12 pages if L2 is active, i.e. if a "full" VM-Exit is guaranteed before KVM will retry getting vmcs12 pages.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2026-68081
Debian:13linux6.12.115-2DEBIAN-CVE-2026-68081
Debian:14linux7.1.5-1DEBIAN-CVE-2026-68081
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux7.0.0-38.38UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux-aws7.0.0-1014.14UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-aws-7.07.0.0-1014.14~24.04.1UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux-azure7.0.0-1017.17UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-azure-7.07.0.0-1017.17~24.04.1UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux-azure-fde7.0.0-1016.16UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-azure-fde-7.07.0.0-1016.16~24.04.1UBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux-gcp7.0.0-1014.14UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-gcp-7.07.0.0-1014.14~24.04.1UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux-gke7.0.0-1008.9UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-38.38~24.04.4UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux-ibm7.0.0-1015.15UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-nvidia-7.07.0.0-1024.25~24.04.1UBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux-nvidia-bos7.0.0-2022.23UBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1015.15UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux-oracle7.0.0-1013.13UBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-oracle-7.07.0.0-1013.13~24.04.1UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux-realtime7.0.0-38.38.1UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-68081
Ubuntu:26.04:LTSlinux-riscv7.0.0-38.38.1UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-38.38.1~24.04.1UBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-68081
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-68081
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-68081

Affected products (as reported)

VendorProductVersions
Linux Linux 96c66e87deeeb3cc78a3b82a1de8e365eec206c1 – before c174eb76484786721ae9a104344b952acf0e271796c66e87deeeb3cc78a3b82a1de8e365eec206c1 – before a7bf4f5b19965e4466040ad6b24919c1ed326a8496c66e87deeeb3cc78a3b82a1de8e365eec206c1 – before f42669f931a6f45e5918cf5e99989b9a6c65e65596c66e87deeeb3cc78a3b82a1de8e365eec206c1 – before 7996013b85687034d2e820cef94d6404192e3a3d96c66e87deeeb3cc78a3b82a1de8e365eec206c1 – before 2c87a087c20632d68920272173b5d7c47f9bcf7096c66e87deeeb3cc78a3b82a1de8e365eec206c1 – before 2f2312c422fd2695da772cecb30c69994b795964
Linux Linux 5.2

References