Review reviewHigh

CVE-2026-64172

Linux

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235) Hygon Family 18h CPUs are derived from AMD Family 17h (Zen1) silicon and share the same erratum #1235: hardware may read a stale IsRunning=1 bit during ICR write emulation and silently fail to generate an AVIC_IPI_FAILURE_TARGET_NOT_RUNNING VM-Exit on the sending vCPU. The absence of the VM-Exit causes KVM to miss the required wakeup of blocking target vCPUs, leading to hung vCPUs and unbounded delays in guest execution. Extend the existing AMD Fa...

CVSS: 7.1
EPSS: -
CISA KEV: Not listed
Published: 2026.07.20

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.1

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 8de4a1c8164e5b2e40d1df764840a31de983f40b < 94ade38f317ea086a181db0e6b69c574b3b70a5e, >= 8de4a1c8164e5b2e40d1df764840a31de983f40b < 9560e6fee887a9594a89fa265b5b9c79b1591803, >= 8de4a1c8164e5b2e40d1df764840a31de983f40b < 9a12fa5213cfc391e0eed63902d3be98f0913765, >= 6.17
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE: Not available