CVE-2026-68081Patch

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path doesn't use nested_vmx_vmexit() as that API is intended to be used if and only if L2 is active, and the open coded equivalent neglects to put the vmcs12 pages. Failure to put the vmcs12 pages leaks any pinned pages (and/or mappings) if L1 retries VMLAUNCH/VMRESUME. Note, the !from_vmenter scenario doesn't suffer the same problem, as vmx_get_nested_state_pages() only gets/pins/maps the vmcs12 pages if L2 is active, i.e. if a "full" VM-Exit is guaranteed before KVM will retry getting vmcs12 pages.

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 8 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 5 signals
  • Technical details provided in 5 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 6 mentions (2026-08-08); latest day: 1
  • 8 total mentions across 3 days

Deep dive

Activity timeline8 mentions / 3d
02356Mentions · 2026-08-08: 6Mentions · 2026-08-09: 1Mentions · 2026-08-18: 1Patch / Workaround · 2026-08-08: 4Patch / Workaround · 2026-08-09: 1Technical Details · 2026-08-08: 4Technical Details · 2026-08-09: 108-0808-0908-18
Signal classification3 categories
Patch
562.5%
General
225.0%
Disclosure
112.5%
Referenced assets6 URLs
Classification over time
DateTotalLabels
2026-08-086
Disclosure1General1Patch4
2026-08-091
Patch1
2026-08-181
General1
Full discourse8 posts
  • Kazuki Omo@omokazuki
    General

    Linux Kernelの脆弱性(CVE-2026-68081〜CVE-2026-68479) #security #vulnerability #セキュリティ #脆弱性 #linux #kernel https://security.sios.jp/vulnerability/kernel-security-vulnerability-20260819/

    Post summary

    The tweet announces a set of Linux kernel CVEs and links to an external page for more information, but provides no concrete details about PoC, exploits, patches, or active exploitation.

    00011321
    372 followersView on X
  • Rıdvan Yağlı@ridvanyagli
    Patch

    🔴 CVE-2026-64561 (Zapscape) ardından Linux KVM'de yeni bir nVMX açığı daha ortaya çıktı: CVE-2026-68081 Nested VM-Enter işlemi geçersiz guest state nedeniyle başarısız olduğunda "vmcs12" sayfalarının düzgün serbest bırakılmaması sonucu kaynak/sayfa sızıntısına yol açıyor. Özellikle nested virtualization kullanan KVM hostlar için kernel güncellemesi öneriliyor.

    Post summary

    The text describes a nested‑VM vulnerability in KVM that causes resource leakage and recommends applying a kernel update as a mitigation.

    00011331
    1.6K followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-68081 In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 p… https://www.cve.org/CVERecord?id=CVE-2026-68081

    Post summary

    CVE-2026-68081 has been addressed in the Linux kernel, indicating a patch or fix is available, but no PoC or exploit details are provided.

    000021.5K
    57.9K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Patch

    CVE-2026-68081 In the Linux kernel, the following vulnerability has been resolved: KVM https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-68081

    Post summary

    The brief note indicates that CVE-2026-68081 has been patched in the Linux kernel, with no PoC, exploit tools, or evidence of active exploitation mentioned.

    00011169
    4.1K followersView on X
  • Windows Forum@windowsforum
    Patch

    🛠️ CVE-2026-68081 isn’t a data-theft bug—it just makes Intel KVM hoard guest memory after failed nested VM launches. Patch it before “why is the host choking?” becomes your incident report. https://windowsforum.com/security-alerts.84/cve-2026-68081-patch-intel-kvm-nested-vm-memory-leak.442118/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #KernelSecurity #NestedVirtualization #LinuxKvm #IntelVmx https://t.co/bVbrEZa5Hf

    Post summary

    CVE-2026-68081 causes Intel KVM to hoard guest memory after failed nested VM launches; patching is recommended to avoid host instability.

    0001048
    1.3K followersView on X
  • VulDB 🛡@vuldb
    General

    A new vulnerability with increased severity was disclosed for Linux Kernel (CVE-2026-68081) https://vuldb.com/vuln/387167

    Post summary

    The text announces a newly disclosed Linux Kernel vulnerability (CVE-2026-68081) with reportedly increased severity, but provides no further technical or actionable details.

    00010173
    2.3K followersView on X
  • Infoflowcloud@infoflowcloud
    Patch

    🚨*CVE* CVE-2026-68081 In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 p… https://www.cve.org/CVERecord?id=CVE-2026-68081 ----- Traducción: CVE-2026-68081 En … http://infoflow.cloud`

    Post summary

    CVE‑2026‑68081, a nested‑virtualization bug in the Linux kernel, has been resolved; the post references the fix but offers no detailed patch or exploit information.

    0000040
    98 followersView on X
  • CyberSignal | Cybersecurity News@XQOPTRX
    Disclosure

    🐧 New Linux KVM vulnerability disclosed CVE-2026-68081 affects Linux KVM nested virtualization. A bug in nVMX handling could leave VMCS12 pages pinned when nested VM entry fails, causing resource leakage if operations are repeatedly retried. 📅 Published: August 8. 🔎 Source: Linux Kernel / Rapid7. #Linux #KVM #Virtualization #CVE #CyberSecurity

    Post summary

    A new CVE-2026-68081 involving resource leakage in Linux KVM nested virtualization has been disclosed, detailing a bug in nVMX handling that leaves VMCS12 pages pinned during nested VM entry failures.

    0000092
    34 followersView on X

Explore more