A vulnerability in the Linux kernel KVM module allows an authenticated local attacker to cause improper TLB invalidation, posing a high risk of cross-guest memory access or system instability.

The KVM hypervisor fails to correctly synchronize INVVPID operations when a virtual CPU migrates between physical cores. This race condition allows stale TLB entries to persist, potentially permitting a local user with low privileges to access or manipulate memory belonging to other virtual machines.

The exploitation of this flaw could lead to severe security breaches in multi-tenant cloud or virtualized environments. Because the vulnerability allows for potential cross-guest data leakage, it threatens the confidentiality and integrity of sensitive enterprise workloads. With a CVSS score of 8.8, this issue is rated as High severity, necessitating prompt attention to prevent unauthorized access to virtualized assets.

Immediate Action: Update the Linux kernel to version 6.12.110, 6.18.51, 7.2.5, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for unexpected KVM-related errors or kernel panics that may indicate attempts to trigger race conditions or hypervisor failures.

Compensating Controls: Restrict access to virtual machine configuration and management interfaces to authorized administrators only, as the attack requires local access to the host or a compromised guest environment.

Public Exploit Available: Unknown

Given the potential for cross-guest impact, this vulnerability represents a significant risk to virtualized infrastructure. System administrators should prioritize kernel updates across all virtualization hosts. Applying the available patches is the only effective way to ensure the KVM hypervisor correctly handles TLB invalidation during vCPU migration.