Search: CVE-2026-63807

CVE-2026-63807 is a vulnerability in the Linux kernel's KVM x86 memory management unit (MMU) subsystem. It involves improper validation of hugepage mappings during shadow MMU hugepage recovery, which can lead to out-of-bounds access and a host page fault. This occurs when a guest creates a hugepage mapping that extends below the bounds of a memory slot, causing KVM to access invalid memory. The issue has been fixed in specific Linux kernel commits.