Dashboard / CVE-2026-63938

CVE-2026-63938

CRITICAL
INFO Priority: 0.02 BB Relevance: 54/100
Published: 2026-07-19 Modified: 2026-10-27 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth No Interaction Conf. Impact Integ. Impact Scope Change

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: None
S: Changed
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the actual size of the buffer When processing Page State Change (PSC) requests, validate the PSC buffer against the effective size of the scratch area, which could be less than the maximum size if the guest provided a pointer that isn't exactly at the start of the GHCB shared buffer.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
linux linux_kernel 6.11 – 6.12.93
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1

References & Advisories (4)

Bug Bounty Relevance

54 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS — Exploitation Probability

0.20%
Raw Score 0.001960
Percentile 9.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00196
2026-10-28
0.00196

Intelligence Sources

nvd ref →

External Links