A vulnerability in the Linux kernel KVM subsystem could allow a local authenticated attacker to achieve information disclosure, data integrity compromise, or system disruption.

This flaw exists in the KVM nested VMX implementation where the vpid02 structure is not properly flushed upon first use. An authenticated local user could potentially leverage this to access stale TLB entries from a previous process or virtual machine context.

Successful exploitation of this kernel level vulnerability carries severe risks, including unauthorized access to sensitive data across virtual machine boundaries or total system compromise. Given the CVSS score of 8.8, which reflects a high impact on confidentiality, integrity, and availability, this issue requires prompt attention in virtualized infrastructure environments.

Immediate Action: Update the Linux kernel to one of the patched versions: 5.15.221, 6.1.188, 6.6.157, 6.12.110, or newer.

Proactive Monitoring: Monitor system logs for unexpected crashes or errors related to KVM or nested virtualization operations.

Compensating Controls: Restrict access to virtualization management functions and enforce strict least privilege policies for local users to limit the potential for local exploitation.

Public Exploit Available: Unknown

The technical nature of this kernel vulnerability presents a high risk to the stability and security of virtualized environments. Administrators should prioritize patching the Linux kernel across all affected hosts to eliminate the risk of cross-VM data leakage. Apply the vendor-provided updates immediately to ensure the integrity of the KVM hypervisor.