LIVE · cybersecurity feed
Live wire
cve recordcritical

CVE-2026-63940

Published
CVSS9.3
Severitycritical
Weakness
ExploitedNot in CISA KEV

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore Port I/O requests of length '0' (or count '0'), so that setting up the software scratch area (and other code) doesn't have to worry about underflowing the length, and to allow for WARNing on trying to configure the scratch area with len==0.

References

← Back to the CVE Tracker

Our coverage of CVE-2026-63940

No stories yet. This page updates automatically when we publish reporting that references CVE-2026-63940.