目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CVE-2026-31593— Linux kernel 安全漏洞

AI 预测 7.8 利用难度: 中等 EPSS 0.12% · P2

影响版本矩阵 12

厂商产品版本范围状态
LinuxLinuxad27ce155566f2b4400fa865859834592bd18777< c9609847ae65ca36233077c2b6cb2bc0fb37c77aaffected
ad27ce155566f2b4400fa865859834592bd18777< 692fdf05e55fa03960a1278afdc2478c12daea13affected
ad27ce155566f2b4400fa865859834592bd18777< 6ef109e01e1d35199e1a97ea68bdfd3cf3fbf9abaffected
ad27ce155566f2b4400fa865859834592bd18777< 8f85a4885eee8cb495961ffa371a91828afb9445affected
ad27ce155566f2b4400fa865859834592bd18777< 9b9f7962e3e879d12da2bf47e02a24ec51690e3daffected
6.11affected
< 6.11unaffected
6.12.83≤ 6.12.*unaffected
… +4 条更多
获取后续新漏洞提醒登录后订阅

一、 漏洞 CVE-2026-31593 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU Reject synchronizing vCPU state to its associated VMSA if the vCPU has already been launched, i.e. if the VMSA has already been encrypted. On a host with SNP enabled, accessing guest-private memory generates an RMP #PF and panics the host. BUG: unable to handle page fault for address: ff1276cbfdf36000 #PF: supervisor write access in kernel mode #PF: error_code(0x80000003) - RMP violation PGD 5a31801067 P4D 5a31802067 PUD 40ccfb5063 PMD 40e5954063 PTE 80000040fdf36163 SEV-SNP: PFN 0x40fdf36, RMP entry: [0x6010fffffffff001 - 0x000000000000001f] Oops: Oops: 0003 [#1] SMP NOPTI CPU: 33 UID: 0 PID: 996180 Comm: qemu-system-x86 Tainted: G OE Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Hardware name: Dell Inc. PowerEdge R7625/0H1TJT, BIOS 1.5.8 07/21/2023 RIP: 0010:sev_es_sync_vmsa+0x54/0x4c0 [kvm_amd] Call Trace: <TASK> snp_launch_update_vmsa+0x19d/0x290 [kvm_amd] snp_launch_finish+0xb6/0x380 [kvm_amd] sev_mem_enc_ioctl+0x14e/0x720 [kvm_amd] kvm_arch_vm_ioctl+0x837/0xcf0 [kvm] kvm_vm_ioctl+0x3fd/0xcc0 [kvm] __x64_sys_ioctl+0xa3/0x100 x64_sys_call+0xfe0/0x2350 do_syscall_64+0x81/0x10f0 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7ffff673287d </TASK> Note, the KVM flaw has been present since commit ad73109ae7ec ("KVM: SVM: Provide support to launch and run an SEV-ES guest"), but has only been actively dangerous for the host since SNP support was added. With SEV-ES, KVM would "just" clobber guest state, which is totally fine from a host kernel perspective since userspace can clobber guest state any time before sev_launch_update_vmsa().
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于KVM SEV允许同步已启动加密vCPU的VMSA，访问客户私有内存时触发RMP异常导致主机崩溃。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商产品影响版本CPE订阅
LinuxLinux ad27ce155566f2b4400fa865859834592bd18777 ~ c9609847ae65ca36233077c2b6cb2bc0fb37c77a -
LinuxLinux 6.11 -

二、漏洞 CVE-2026-31593 的公开POC

#POC 描述源链接神龙链接
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2026-31593 的情报信息

请登录查看更多情报信息。

CVE-2026-31593 补丁与修复 (1)

同批安全公告 · Linux · 2026-04-24 · 共 138 条

CVE-2026-316379.8 CRITICALLinux kernel 安全漏洞
CVE-2026-316099.8 CRITICALLinux kernel 安全漏洞
CVE-2026-316089.8 CRITICALLinux kernel 安全漏洞
CVE-2026-316339.8 CRITICALLinux kernel 安全漏洞
CVE-2026-316579.8 CRITICALLinux kernel 安全漏洞
CVE-2026-316699.8 CRITICALLinux kernel 安全漏洞
CVE-2026-316689.8 CRITICALLinux kernel 安全漏洞
CVE-2026-316079.8 CRITICALLinux kernel 安全漏洞
CVE-2026-315369.8 CRITICALLinux kernel 安全漏洞
CVE-2026-316599.8 CRITICALLinux kernel 安全漏洞
CVE-2026-316499.8 CRITICALLinux kernel 安全漏洞
CVE-2026-315899.8 CRITICALLinux kernel 安全漏洞
CVE-2026-316369.1 CRITICALLinux kernel 安全漏洞
CVE-2026-315708.8 HIGHLinux kernel 安全漏洞
CVE-2026-315588.8 HIGHLinux kernel 安全漏洞
CVE-2026-315538.8 HIGHLinux kernel 安全漏洞
CVE-2026-315888.8 HIGHLinux kernel 安全漏洞
CVE-2026-316298.8 HIGHLinux kernel 安全漏洞
CVE-2026-316228.8 HIGHLinux kernel 安全漏洞
CVE-2026-316118.6 HIGHLinux kernel 安全漏洞

显示前 20 条，共 138 条。 查看全部 &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-31593

暂无评论

发表评论