Skip to content
Hermes Codex

CVE-2026-43133: Linux Kernel KVM nSVM VMLOAD/VMSAVE Emulation Hypervisor Escape

HERMES

HERMES THREAT SCORE & ENTERPRISE INFRASTRUCTURE RISK

Target: Linux Kernel KVM Virtualization Subsystem (arch/x86/kvm/svm)
Confidence: 94%
88 / 100
HIGH

Measures real-world operational relevance, exploit weaponization, and active threat posture.

Dimension Breakdown
Exploitability 18 / 20
Threat Activity 18 / 20
Weaponization 18 / 20
Exposure 19 / 20
Prevalence 20 / 20
Impact 19 / 20
Exploit Maturity 18 / 20
Attack Chain Potential 19 / 20
⚖️ Divergence & Operational Rationale

Rated CVSS 7.9 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H) and HTS 88. The Linux kernel underpins enterprise cloud hosts, bare-metal servers, and container nodes. Vulnerabilities in arch/x86/kvm/svm/nested.c allow attackers to breach system integrity directly at the ring-0 supervisor boundary.

🕸️ Connected Knowledge Graph & Provenance

CVE-2026-43133: Linux Kernel KVM nSVM VMLOAD/VMSAVE Emulation Hypervisor EscapeVULNERABILITY

Connected Nodes: 1
Active Relationships (Outgoing)
→ affectsPRODUCTLinux Kernel Core
98% VERY_HIGH

Software platform affected by security vulnerabilities and agentic attack patterns.

🔍 Why is this related? (Evidence & Provenance)

“Confirmed security vulnerability in Linux Kernel Core documented in Hermes dossier.”

Supporting Verified Evidence:

1. Technical Context & Affected Software Matrix

Section titled “1. Technical Context & Affected Software Matrix”
ParameterTechnical SpecificationOperational Impact
CVE IdentifierCVE-2026-43133CERTFR-2026-AVI-1204 & RHSA-2026:68131
Vulnerability ClassCWE-628: Function Call with Incorrect Parameter / VMCB DesynchronizationSupervisor memory corruption / privilege escalation
Subsystem / Driverarch/x86/kvm/svm/nested.cCore Linux kernel subsystem
Attack VectorAV:LExploitable via system call or network transport
Privileges RequiredUI:NExploitation profile
Target Architecturex86_64, aarch64, ppc64le, s390xEnterprise server platforms
Upstream Fix Version6.18.25Linux Torvalds Git tree
Enterprise Distribution Fixkernel-6.12.0-211.55.1.el10_2Red Hat Security Advisory patch

2. Vulnerability Anatomy & Root Cause Analysis

Section titled “2. Vulnerability Anatomy & Root Cause Analysis”

Kernel Source Dissection

Section titled “Kernel Source Dissection”

In the KVM nested virtualization engine for AMD processors, VMLOAD and VMSAVE emulation handlers failed to consistently reference the root virtual machine control block (vmcb01). When an L2 nested guest executes VMSAVE or VMLOAD, hardware CPU state registers were saved to or restored from unvalidated L1 VMCB physical addresses, enabling an L2 guest to leak or overwrite hypervisor-level control registers on the bare-metal host.

Vulnerable Code Pattern

Section titled “Vulnerable Code Pattern”
arch/x86/kvm/svm/nested.c
int nested_svm_vmloadsave(struct kvm_vcpu *vcpu, bool vmload)
{
    struct vcpu_svm *svm = to_svm(vcpu);
    // INSECURE: Nested dispatch mistakenly targeted svm->vmcb (which points to vmcb02 during L2 execution)
    struct vmcb *target_vmcb = svm->vmcb;
    return svm_vmloadsave(target_vmcb, svm->nested.vmcb12_gpa);
}

Upstream Kernel Fix

Section titled “Upstream Kernel Fix”
// arch/x86/kvm/svm/nested.c - enforce vmcb01 root state tracking
int nested_svm_vmloadsave(struct kvm_vcpu *vcpu, bool vmload)
{
    struct vcpu_svm *svm = to_svm(vcpu);
    // FIXED: Always route nested VMLOAD/VMSAVE emulation via root vmcb01 control block
    struct vmcb *target_vmcb = svm->vmcb01.ptr;
    return svm_vmloadsave(target_vmcb, svm->nested.vmcb12_gpa);
}

3. Exploit Mechanics & Weaponization Vectors

Section titled “3. Exploit Mechanics & Weaponization Vectors”

An attacker leveraging CVE-2026-43133 follows a structured exploitation sequence:

  1. Trigger Condition Formulation: The adversary prepares specially crafted packets or system calls targeted at arch/x86/kvm/svm/nested.c to force the vulnerable code path.
  2. Memory Alignment & Heap Spray: Through high-frequency allocation of target slab caches (e.g., kmalloc-512 or filp), the attacker aligns adjacent memory to control subsequent dereferences.
  3. Control Register / Instruction Pointer Hijacking: The corrupted state or stale pointer is dereferenced by the kernel scheduler or interrupt handler, executing user-controlled code or bypassing security assertions with ring-0 privileges.

4. Detection Rules & Threat Hunting

Section titled “4. Detection Rules & Threat Hunting”

Host-Based Auditd / eBPF Rule

Section titled “Host-Based Auditd / eBPF Rule”
Terminal window
# Monitor invocations and subsystem access via Linux audit daemon
-w /dev/kvm -p rw -k kvm_virtualization_access
-a always,exit -F arch=b64 -S ioctl -F a1=0xAE80 -k kvm_vm_control

Network Intrusion Signature (Suricata / Snort)

Section titled “Network Intrusion Signature (Suricata / Snort)”
# Network detection signature where applicable
alert ip any any -> any any (msg:"HERMES - CVE-2026-43133 Exploitation Activity Detected"; \
    flow:established; classtype:attempted-admin; sid:99202643133; rev:1;)

5. Remediation & Operational Guidance

Section titled “5. Remediation & Operational Guidance”
  1. Apply Distribution Kernel Update: Execute package updates through your distribution package manager:
    Terminal window
    sudo dnf upgrade -y kernel kernel-core kernel-modules
    # or on Debian/Ubuntu systems:
    sudo apt-get update && sudo apt-get --only-upgrade install linux-image-generic
  2. Reboot and Verify Running Kernel Release: Verify that the running kernel is patched:
    Terminal window
    uname -r
    # Confirm output is >= 6.18.25 or distribution patched release
  3. Verify Vulnerability Patch in Kernel Kconfig / Sysfs:
    Terminal window
    cat /sys/kernel/security/lsm