CVE-2026-64562

Summary

This vulnerability allows an attacker to potentially free a shadow VMCS prematurely, leading to a race condition that could result in the kernel memory being freed while the vCPU is still using it, potentially leading to a denial of service or other kernel-level issues.

Exploitability

Exploitation requires an attacker to have the ability to trigger a vCPU migration while the VMCS is being freed, which is considered moderately difficult and requires specific conditions to be met.

Blast radius

If exploited, the impact is likely to be limited to the specific virtual machine experiencing the issue, potentially leading to a denial of service or kernel panic, but not affecting other systems directly.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the fixed version 6.1.11 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.